PHP - Navigation Function And Re Run Script?

Hi,
This escape function will only block quotes

How would you stop java script insertion?
 

function escape($string) {
    return htmlentities($string, ENT_QUOTES, 'UTF-8');
}

Thanks  

$sqlresdays="SELECT DATEDIFF(CURDATE(),MAKEDATE(YEAR(CURDATE()),1)) AS date_difference";
            $resdays=mysqli_query($donnees,$sqlresdays);
            $daysinyr=mysqli_fetch_object($resdays);
            $divider = $daysinyr->date_difference;

When running the sql request raw, no problem, date_difference shows the right number but in the script nothing is echo'd. Thanks for clues on how to resolve this.

I am a bit desperate about this problem that I have been trying to solve for several days now.

I'm trying to run a Python script from the exec() function in php. The script is called but the print job is never executed. 

This process has been running for several years and for no clear reason it suddenly stopped working.

On my home computer, it works without any problem. In my virtual machine, nothing happens. The print() functions present in the script are well displayed by the return value received by php but the printing is not executed.

The virtual machine is a test environment, in production it is also an physical machine.

PHP

<?php
        exec("py C:\xampp\htdocs\test\test.py", $out, $res);
        echo "<pre>";
        print_r($out);
    	echo "</pre>";
    echo "<pre>";
    	print_r($res);
	echo "</pre>";
?>

PYTHON

if __name__ == "__main__":
  try:
    filename = "C:/xampp/htdocs/test/test.pdf"
    win32api.ShellExecute(0, "print", filename, None, ".", 0)
    except Exception as e:
      print(f "An error occured during print_pdf : {e}")

The two environments are approximately the same:
* Build 1909
* Python 3.9.5
* Apache 2 & php > 7
* local user member of the administrators group
* local user owner of the apache2 service
* Same printer configured by default

I'd like to point out that running the script directly from the CLI works on both machines.

On the problematic machine, exec() only returns the result of print(..) 

I already opened a thread a few months ago about this problem but received no response.

Thank you in advance.
 

I have a simple php script that updates my sitemap automatically. However, when you click the link to the sitemap at www.bomstudies.com/sitemap-xml.php - the last mod date is showing 1969. The php script works for files that are not in sub folders. such as /talks or /commentary. I just need to know what snippet of code i should add, change, or delete to the sitemap php side of it to show the correct last mod date for my xml sitemap. I greatly appreciate your help.    Thanks -    Here is some of my code:   The Config Code: posted as config.php <?php

here is my code: Code: [Select]
function registerUser() {

   mysql_connect('localhost', 'user', 'password', 'table');
   $rsPostCode = $_POST['rsPostCode'];
    $rsGender = $_POST['rsGender'];
    $rsUser = $_POST['rsUser'];
   $rsPass = $_POST['rsPass'];
    $rsEmail = $_POST['rsEmail'];
    $rsMobile = $_POST['rsMobile'];
    $rsAge = $_POST['rsAge'];

   $sql = "INSERT INTO members_copy (rsPostCode, rsGender, rsUser, rsPass, rsEmail, rsMobile, rsAge) VALUES ($rsPostCode, $rsGender, $rsUser, $rsPass, $rsEmail, $rsMobile, $rsAge);";
//echo $sql;
   mysql_query($sql);
}
When I write out my SQL this is the output: INSERT INTO members_copy (rsPostCode, rsGender, rsUser, rsPass, rsEmail, rsMobile, rsAge) VALUES (BN11, Male, jarv, mypassword, john@email.com, 07998989999, 08/11/1978);

here is my register page: http://www.retroandvintage.co.uk/register.php

Hello all, I have some piece of code that is nested like this


$variable = 'This is a global argument';
function parentFunction($variable) {
function childFunction() {
echo 'Argument of the parent function is '.$GLOBALS['variable'];
}
childFunction();
}
parentFunction(5);


What I want to know is - Is there a way to access a variable from the parent function without passing arguments to the child function? (Something like how classes have parent::?). I don't want to use $GLOBALS because it might cause some variable collision, and I didn't want to pass arguments because incase I decide to change the arguments in the parent function I'd have to do it in the child function aswell. From my searching around in the Internet it seems like this is not possible, but if theres a slight chance that there might be something out there, i'm willing to give it a shot .

Thanks in advance

I have this function completely written in my class file that I am working on.  The point to this function is to be able to check the login of a user or administrator for either of the control panels associated with my site.

It will check the session intime as well as the page / module referenced.  Once it passes all those checks, it will check and ensure the emailaddress/password stored in the current session still holds true and the account is still active...  if the account is still active it will update the lastActivity as well as update all of the session variables with what is currently in the database.

What I am looking for is basically a look at the function, see if it looks good..  If there is any part to it that could create security holes for the site just off the login function itself...

Usage: $q->validUser($_SESSION['user'], $_mod);

<?php
 function validUser($sess, $p) {

if ($sess['inTime'] == '' && $p != 'login' && $p != 'logout') {
session_destroy();
$login = '0';
$_int = '';
return $login;
} else if ($sess['inTime'] < time()-3600 && $p != 'login') {
$sess['inTime'] = '';
session_destroy();
$this->check_login($sess, $p);
} else {
$this->user = $sess['emailAddress'];
$this->pass = $sess['password'];

$login = $this->sql_query("SELECT * FROM users WHERE emailAddress = '".$this->user."' AND password = '".$this->pass."' 
   AND status = '1' LIMIT '1'");
if ($login = $this->sql_numrows($login) < 1) {
$sess['inTime'] == '';
session_destroy();
$login = '0';
} else {
// logged in, lets update the database for last_activity AND the session.

$this->sql_query("UDATE users SET lastActivity = '".now()."' WHERE
  emailAddress = '".$this->user."'");
$login = $this->sql_query("SELECT * FROM users WHERE emailAddress = '".$this->user."' AND password = '".$this->pass."' 
       AND status = '1' LIMIT '1'");
$login = mysql_fetch_assoc($login);
foreach ($login as $key => $value)
{ 
$sess[$key] = $value;
}
$sess['inTime'] = time();
$login = '1';
}
return $login;
}
}

?>

That is the main function, sql_query and sql_numrows is:

<?php
function sql_query($query = "", $transaction = FALSE) {
unset($this->query_result);

if ($query != "") {
$this->num_queries++;
if ($transation == BEGIN_TRANSACTION && !$this->in_transation) {
$result = mysql_query("BEGIN", $this->db_connect_id);
if (!$result) {
return false;
}
$this->in_transaction = TRUE;
}

$this->query_result = mysql_query($query, $this->db_connect_id);
} else {
if ($transaction == END_TRANSACTION && $this->in_transaction ) {
$result = mysql_query("COMMIT", $this->db_connect_id);
}
}
if ($this->query_result) {
unset($this->row[$this->query_result]);
unset($this->rowset[$this->query_result]);

if ($transaction == END_TRANSACTION && $this->in_transaction ) {
$this->in_transaction = FALSE;
if (!mysql_query("COMMIT", $this->db_connect_id)) {
mysql_query("ROLLBACK", $this->db_connect_id);
return false;
}
}
return $this->query_result;
} else {
if ($this->in_transaction ) {
mysql_query("ROLLBACK", $this->db_connect_id);
$this->in_transaction = FALSE;
}
return false;
}
}

function sql_numrows($query_id = 0) {
if(!$query_id) {
$query_id = $this->query_result;
}
return ($query_id) ? mysql_num_rows($query_id) : false;
} ?>

Any insight that can help to benefit these functions would be appreciated.

Question 1) Is the only and proper way to call a parent function "parent::function()"?  Are there other/better ways from within a child function?

Question 2) What are the deciding factors for when to make a function or attribute static?  How do you make that decision?  Assuming 5.3...

Thanks.

I need to call usort from a class function, and I'm puzzled about how to define the comparison function.

I've tried to define the comparison function in the same class, but I can't get usort to call it. I found one hint that it will work if I make the comparison function static, but I tried that, and it didn't work for me.

If I define the comparison function outside the class, it won't have access to object properties that it needs to operate.

The only solution I can think of is to define the comparison function outside the class and put the object properties it needs in globals. Is there a cleaner way to do this?

Hello!

I want to define a function instead of repeating query in all my php pages. I call a function by passing an $id value and from that function i have to get all the info related to that id, like name, description and uom.    I am trying to do this, but i dont know how to get these values seperately.   here is my function  

function items($item_id)
{
$details = array(); 
$result = mysql_query("select item_id, name, uom, description from items where item_id=".$item_id."") or die (mysql_error());
while($row = mysql_fetch_array($result))
{
$details[] = array((stripslashes($row['name'])), (stripslashes($row['uom'])), (stripslashes($row['description'])));
}
return $details;
}

and i call my function like this

$info = items($id);

Can somebody guide me in this    

When I put this chunk of code into it's own function:


function fetch_all ($dbc, $query) {

include ('knuffix_list_func.php');

pagination_start ($dbc, $query);

$offset = $pag_array[0];

$rows_per_page = $pag_array[1];

$query = $query . " LIMIT $offset, $rows_per_page";

echo "test query: " . $query;

knuffix_list ($query, $dbc);

pagination_end ($pag_array);
}


And when I echo out the query as you can see in the example, then I notice that the variables $offset and $rows_per_page never get appended.
I set the variable $pag_array to a global inside the function pagination_start(). It usually works when I DON'T wrap a function around this chunk of code, but if I do wrap a function around everything then the global suddenly won't work anymore.

Btw, this also won't work if I wrap a function around the function DECLARATIONS.

Any ideas, how I could make it work?

Hi everyone!

I've been working on a php script to replace links that contain a query with direct links to the files they would redirect to.

Hello:

I wanted to see if someone can help me figure out how to include data from my included navigation file.

Meaning:

I have this file called myNav.php (the database table storing this is "myUpcomingEvents"):
Code: [Select]
function spLeftMenu() {
$spLeftMenu =
"

<div id=\"sideEvents\">
echo \" $mySideBarData; \";
</div>

";
return $spLeftMenu;
}

I am trying to pull it into the Index.php page like this (the database table storing this is "myHome"):
Code: [Select]
<?php
include('include/myConn.php');
include('include/myNav.php');

$query=mysql_query("SELECT * FROM myHome,myUpcomingEvents") or die("Could not get data from db: ".mysql_error());
while($result=mysql_fetch_array($query))
{

  $myPageData=$result['myPageData'];
  
  $mySideBarPageData=$result['mySideBarPageData'];
}

?>

<!DOCTYPE HTML>

<html>

<head></head>

<body>

<div id="siteContainer">


<div id="leftColumn">
<?php echo spLeftMenu(); ?>
</div>

<div id="mainContent">
<?php echo $myPageData; ?>
</div>


</div>

</body>

</html>

Can't get it to work. It just writes out:
Code: [Select]
echo " ; ";

Anyone know how I can get this to work?

Thanks.

Hey,

I hope you will understand what I am saying, because english isn't my main language -.-,

Anyway, I need to create a folder navigation, what I mean is like

you got folder on your comp : C:\navThing\ (and many sub folders and files)

what I want to do is list all files from the current directory where the user is. if he is in C:\navThing\ show dir and files in C:\navThing\ only...
if he is in C:\navThing\lol\ show dir and files in C:\navThing\lol only...

but I don't know how to get the user position, for the moment I'm using $_GET, but well, I don't think it's really secure... ( xxx.php?path=lol/ )

if anybody can think of any other way, where the user can't modify it tell me, I thougth session would be good, but what if he use previous... anyway any suggestion?