PHP - Imagecreatefromjpeg Failure

I'm not sure what I am doing wrong but I am attempting to create a hook system that I can use with modules... Could someone please take a look at the code and point me in the right direction? I've never really dealt with OOP so please be detailed in your response.

There are no errors, it's just not working as expected.

<?php
new System();
class System {
public function __construct() { 
$this->admin = new Admin( &$this );
}

public function add_hook( $tag, $method, $class ) {
$this->hooks_added[$tag][] = array( 'method' => $method, 'class' => $class );
}

public function do_hook( $tag, $msg ) {
if( !isset( $this->hooks_registered[$tag] ) )
$this->hooks_registered[$tag] = $msg;
else
$this->fatal_error( "1002." . __LINE__, "Duplicate hook tags defined." );
if( isset( $this->hooks_added[$tag] ) && is_array( $this->hooks_added[$tag] ) ) {
foreach( $this->hooks_added[$tag] as $hook ) {
$hook['class']->$hook['method']();
}
}
}

public function fatal_error( $num = "Undefined", $title = "Undefined", $msg = "Undefined" ) {
$html = 'Error ' . $num . ': ' . $title;
echo $html;
}
}

class Admin {
public $_system;
public $admin_menu = array( 
0 => array( 
"name" => "Link 1", 
"params" => "a=link1"
),
5 => array( 
"name" => "Link 2", 
"params" => "a=link2"
)
);

public function __construct( $_system ) {
$this->_system = $_system;
$this->dashboard = new Dashboard( &$_system );
$this->build_menu();
}

private function build_menu() {
$this->_system->do_hook( "admin_menu", "Modify the administrative menu." );
ksort( $this->admin_menu );
$html = '<ul>';
foreach( $this->admin_menu as $link ) {
$html .= '<li>' . $link['name'] . '</li>';
}
$html .= '</ul>';
echo $html;
}

public function add_menu_item( $name, $params, $sort ) {
if( isset( $this->admin_menu[$sort] ) ) {
$this->add_menu_item( $name, $params, (int) $sort + 1 );
} else {
$this->admin_menu[$sort] = array( "name" => $name, "params" => $params );
}
}
}

class Dashboard extends Admin {
public $_system;
public function __construct( $_system ) {
$this->_system = $_system;
$this->_system->add_hook( "admin_menu", "custom", &$this );
}

public function custom() {
$this->add_menu_item( "Dashboard", "a=dashboard", 0 );
}
}
?>

Thanks

I am working on an e banking web app. So i was stuck on the transferring to the same bank page.. I have spent a lot of time to check where the errors are to no avail. The issue is the code doesnt work it gives a blank page...

    This is 12.php for the post action

<?php
session_start();
        error_reporting(E_ALL);
        
ini_set('display_errors', TRUE);

  if(!isset($_SESSION['login']))
    {
     header('Location: ../clogin.php');
      }

f (isset($_POST['transfer'])) 

      {

    $db['db_host'] = "localhost";
$db['db_user'] = "***"";
$db['db_pass'] = "***";
$db['db_name'] = "***";

foreach($db as $key => $value){
define(strtoupper($key), $value);
}

$connection = mysqli_connect(DB_HOST, DB_USER,DB_PASS,DB_NAME);

$query = "SET NAMES utf8";
mysqli_query($connection,$query);

if(!$connection) {
    echo "database not connected";
}
//get info
 /  $sql = "select firstname,lastname, middlename,username,balance from customer where username = '".$_SESSION['login']."'"; 

send query
/$sql2 = mysqli_query($connection, $sql);

//check query 
if(!$sql2)
{ 
die('ERROR:' . mysqli_error($connection)); 
}
//get trans details
$firstname =  $_POST['firstname'];

              $lastname  =  $_POST['lastname'];   
                   $middlename  =  $_POST['middlename'];          
              $account_number  =  $_POST['accountNumber'];
              $transAmount = $_POST['transAmount'];
              
 $description = $_POST['description'];
 
 $otp =$_POST['otp'];
 
              
$sql3 = "select firstname, lastname, middlename, account_number,balance,otp,otpTime,transLimit from customer
                        where account_number = '$account_number'  ";
               $result3 = mysqli_query($connection,$sql3);

if(!$result3) {
        die('ERROR:' . mysqli_error($connection));
    }

                       
while($row3 = mysqli_fetch_assoc($result3))
{
    
              $rfirstname  = $row3['firstname'];
                             $rlastname   = $row3['lastname'];  
                             $rmiddlename = $row3['middlename'];
                             $raccountNumber = $row3['account_number'];
                  

if($rfirstname !== $firstname &&  $rlastname !== $lastname &&    $rmiddlename !== $middlename && $raccountNumber !== $account_number)           
                         { 

echo'<script>swal.fire("FAILED!!", " The Account Number doesnt match the Account Name. Check Well", "error");</script>';
}

else if($rfirstname == $firstname &&  $rlastname == $lastname &&    $rmiddlename == $middlename && $raccountNumber == $account_number)
 
                            
{
    
    $totalTrans = $transAmount + 30;
    
$sql5 = "SELECT * FROM customer WHERE username = {$username}";
$result5 = mysqli_query($connection, $sql5);
    
    //check query
    if(!$result5) {
        die('ERROR:' . mysqli_error($connection));
    }
    
while($row5 = mysqli_fetch_assoc($result5))
{
$balance = $row5['balance'];

if($totalTrans > $row5['balance'])
{
    echo'<script>swal.fire("FAILED!!", " Insufficient Funds", "error");</script>';

}

}//while balance
    
 $sql6 = "SELECT * FROM customer WHERE username = {$username}";
$result6 = mysqli_query($connection, $sql6);
    
    //check query
    if(!$result6) {
        die('ERROR:' . mysqli_error($connection));
    }
    
while($row6 = mysqli_fetch_assoc($result6))
{  

$transLimit = $row6['transLimit'];

$acctype = $row6['acctype'];

if($transAmount > $row6['transLimit'] && $row6['acctype'] == 'savings')
{
    echo'<script>swal.fire("FAILED!!", " You can Only transfer maximum of 500,000 naira per time", "error");</script>';
}
if($transAmount > $row6['transLimit'] && $row6['acctype'] == 'current')
{
    echo'<script>swal.fire("FAILED!!", " You can Only transfer maximum of 5,000,000 naira per time", "error");</script>';
}

}// end of while transLimit

 

$sqla = "SELECT * FROM customer WHERE username = '".$SESSION['login']."'";
           
  $sqla = mysqli_query($connection, $sqla);  
    
    
if(!$sqla) {
        die('ERROR:' . mysqli_error($connection));
    }
  while($rowa = mysqli_fetch_assoc($sqla))
  {  
 $otp = $rowa['otp'];
 $db_username = $rowa['username'];
           $db_email = $rowa['email'];
           $otpTime = $rowa['otpTime'];
           $time_now = strtotime($otpTime);
           
     

if($otp !== $rowa['otp'])
{
    echo'<script>swal.fire("FAILED!!", " OTP does not match", "error");</script>';
}
if($otp == $rowa['otp'] && (time() - $time_now > 3 * 60))
{
echo'<script>swal.fire("FAILED!!", " OTP expired. Press Resend", "error");</script>';
}
 $sqlb = "update accounts set otp = null where username = '".$_SESSION['login']."' ";     
  
$resultb = mysqli_query($connection, $sqlb);
    
    //check query
    if(!$resultb) {
        die('ERROR:' . mysqli_error($connection));
    }
  
}// while end

$sqlc = "SELECT * FROM customer WHERE username = {$username}";
$resultc = mysqli_query($connection, $sqlc);
    
    //check query
    if(!$resultc) {
        die('ERROR:' . mysqli_error($connection));
    }
    
while($rowc = mysqli_fetch_assoc($result5))
{

$transLimit = $rowc['transLimit'];
$otp = $rowc['otp'];
$balance = $rowc['balance'];
$otpTime = $rowc['otpTime'];

$time_now = strtotime($otpTime);
$totalTrans = $transAmount + 30;

if($rfirstname == $firstname &&  $rlastname == $lastname &&    $rmiddlename == $middlename && $raccountNumber == $account_number && $totalTrans < $transLimit && $totalTrans <= $row['balance']  && $otp == $row['otp'] && (time() - $time_now < 3 * 60))
{
    $sql9 = "update customer set balance = $balance - $totalTrans
                          where username = '".$_SESSION['login']."'";
                
$result9 = mysqli_query($connection, $sql9);
    
    //check query
    if(!$result9) {
        die('ERROR:' . mysqli_error($connection));
    }
  

  $sql10 = "update customer set   balance = $balance + $transAmount
                          where firstname = '$rfirstname' and lastname= '$rlastname' and account_number = '$raccountNumber' and middlename= '$rmiddlename' ";
$result10 = mysqli_query($connection, $sql10);
    
    //check query
    if(!$result10) {
        die('ERROR:' . mysqli_error($connection));
    }
                 
                 
                 
                 
}//end of if
}//end of while

$sqlf = "SELECT * FROM customer WHERE username = {$username}";
$resultf = mysqli_query($connection, $sqlf);
    
    //check query
    if(!$resultf) {
        die('ERROR:' . mysqli_error($connection));
    }
    
while($rowf = mysqli_fetch_assoc($result5))
{

$db_username = $rowf['username'];
$db_email = $rowf['email'];

$msg = " <!DOCTYPE html><body>Dear <h1> $db_username, </h1>
 <h2><font color='darkviolet'>You transferred $transAmount to $rfirstname $rlastname $rmiddlename  with account Number $raccountNumber . Transaction statement/history is available on your portal for reference purposes.Thanks For banking with Us<b>.
 <br> If you didnt request for this transaction, contact your bank immediately!!!</font></h2>.....<br></b><i><font color='blue'>MMFB</font></i>
  </body></html>

 

$headers = "";
$headers .= "From: Mayor Microfinance Bank(MMFB)<admin@mmfb.com.ng> \r\n";
$headers .= "Reply-To:" . $db_username. "\r\n" ."X-Mailer: PHP/" . phpversion();
$headers .= 'MIME-Version: 1.0' . "\r\n";
$headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n"; 
$send = mail("$db_email","SUCCESFUL TRANSACTION",$msg,$headers);
}//end of while

$transid = substr(str_shuffle('abcdefghijklMnopqrstuvwxyz01234567890') , 0 , 10 );

$status1 = '<button class="button">CREDIT</button>';

$status2 = '<button class="button2">DEDIT</button>';

$sqlm = "SELECT * FROM customer WHERE username = {$username}";
$resultm = mysqli_query($connection, $sqlm);
    
    //check query
    if(!$resultm) {
        die('ERROR:' . mysqli_error($connection));
    }
    
while($rowm = mysqli_fetch_assoc($resultm))
{
$sfirstname = $rowm['firstname'];
$smiddlename = $rowm['middlename'];
$slastname = $rowm['lastname'];
$date = date("d/m/Y");

$sql11 = "insert into transactions where account_number = '$raccountNumber'
                                 (status,firstname,lastname,middlename,transAmount,date,account_number,description,transid,type)
                                   values  
                                  ('credit transaction',$sfirstname', '$slastname',
                                   '$smiddlename',
                                   '$transAmount', '$date',
                                   '$raccountNumber',
                                   '$description', '$transid', '$status1')";

                     //   $result11 = $connection->query($sql11);
                        $result11 = mysqli_query($connection, $sql11);
    
    //check query
    if(!$result11) {
        die('ERROR:' . mysqli_error($connection));
    }

$sql12 = "insert into transactions where username = '$username'
                                 (status,firstname,lastname,middlename,transAmount,date,accountNumber,description,transid,type)
                                   values  
                                  ('debit transaction','$firstname', '$lastname',
                                   '$middlename',
                                   '$transAmount', '$date',
                                   '$accountNumber',
                                   '$description', '$tranid', '$status2')";

                      

$result12 = mysqli_query($connection, $sql12);
    
    //check query
    if(!$result12) {
        die('ERROR:' . mysqli_error($connection));
    }

}//end of ehile
$sql15 = "SELECT * FROM customer WHERE username = {$username}";
$result15 = mysqli_query($connection, $sqlf);
    
    //check query
    if(!$result15) {
        die('ERROR:' . mysqli_error($connection));
    }
    
while($row15 = mysqli_fetch_assoc($result15))
{

$firstname = $row15['firstname'];
$lastname = $row15['lastname'];
$db_email = $row15['email'];

$sql16 = "SELECT * FROM customer WHERE account_numberr = $raccountNumber ";
$result16 = mysqli_query($connection, $sql16);
    
    //check query
    if(!$result16) {
        die('ERROR:' . mysqli_error($connection));
    }
    
while($row16 = mysqli_fetch_assoc($result16))
{
$remail = $row16['email'];

$msg = " <!DOCTYPE html><body>Dear <h1> $rfirstname $rlastname $rmiddlename </h1>
 <h2><font color='darkviolet'>Your account $raccountNumber has been credited with $transAmount from $firstname $lastname . Transaction statement/history is available on your portal for reference purposes.Thanks For banking with Us<b>.
 <br> If you didnt request for this transaction, contact ur bank immediately!!!</font></h2>.....<br></b><i><font color='blue'>MMFB</font></i>
  </body></html>

 

$headers = "";
$headers .= "From: Mayor Microfinance Bank(MMFB)<admin@mmfb.com.ng> \r\n";
$headers .= "Reply-To:" . $db_username. "\r\n" ."X-Mailer: PHP/" . phpversion();
$headers .= 'MIME-Version: 1.0' . "\r\n";
$headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n"; 
$send = mail("$remail","SUCCESFUL TRANSACTION",$msg,$headers);   

}//end while 1
}//end while 2

}

else 
{
    echo'<script>swal.fire("FAILED!!", " Something Went Wrong Try Again Later.", "error");</script>';
}

}//while 
}//submit

?>

Then my html form in transfer.php is

                       <form method="POST" class="form-horizontal mt-4" action="">

                                <div class="form-group">
                                    <label>Account Number</label>
                                    <input type="number" class="form-control" id="number" name="accountNumber" placeholder="Enter destination account No" required>
                                </div>

                                <div class="form-group">
                                    <label>Firstname</label>
                                    <input type="text" class="form-control" id="firstname" name="firstname" placeholder="Enter destination surname" required>
                                </div>

                                <div class="form-group">
                                          <label>Lastname</label>
                                    <input type="text" class="form-control" id="lastname" name="lastname" placeholder="Enter destination last name" required>
                                </div>

<div class="form-group">
                                          <label>Middlename</label>
                                    <input type="text" class="form-control" id="middlename" name="middlename" placeholder="Enter destination Middlename" required>
                                </div>
                                <div class="form-group">
                                          <label>Description</label>
                                    <input type="text" class="form-control" id="description" name="description"  placeholder="Enter transfer description" required>
                                </div>
                                <div class="form-group">
                                          <label>Amount</label>
                                    <input type="number" class="form-control" id="amount" name="transAmount" placeholder="Enter the amount to Send" required>
                                </div>
   <div class="form-group">      
<label>ENTER OTP<label>
        <input type="number" class="form-control" name="otp" placeholder="OTP" pattern="[0-9]{4}" title="Only Digits (4 digit required)" required>
          
</div>

<div class="form-group row">
                                  <div class="col-12 text-right">
                                        <button class="btn btn-primary w-md waves-effect waves-light" type="submit" name="transfer">Transfer</button>
                                    </div>
                                </div>

                                <div class="form-group mt-2 mb-0 row">
                                    <div class="col-12 mt-4">
                                        <p class="mb-0">You will be charged 30 Naira for Transfer fee.<a href="dash.php" class="text-primary"> No!! Cancel Transfer</a></p>
                                    </div>
                                </div>

                            </form>
<!-- <button type="button" id ="box" class="btn btn-primary w-md waves-effect waves-light">SEND OTP</button>  -->
                        </div>
                    </div>

                </div>

I will be glad if u can help me. Thanks in advance

 

echo("
<form method = \"get\" action = \"DeleteApp.php?pname=\" . $Applications['Name'] . \">
<input value='Delete' type='submit' />
</form>
");


Why is this redirecting to: DeleteApp.php?. Instead of what you can obviously see what it's supposed to redirect to.

I'm writing a Dynamic image, that display's a user's Name, but for some reason, the kills stat won't print. I made a .php file using the same parsing method, but using echo, and it worked fine. I also know it's not an issue with X,Y, Size, float, anything like that because I tried replacing "$kill" with "Test," and it printed fine.
Here is the actual image:



And here is the code for it:
<?php
Header ('Content-type: image/jpeg');
Header('Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0');
Header('Expires: Thu, 19 Nov 1981 08:52:00 GMT');
Header('Pragma: no-cache');

// get CMID variable from the url
$cmid = $_GET['cmid'];

// create the image using your own background
$image = imagecreatefromjpeg("background.jpg");

// dimensions of the image used
$img_width = 600;
$img_height = 9;

// set the colours
$cool  = imagecolorallocate($image, 81, 86, 96);
$black = imagecolorallocate($image, 0, 0, 0);
$white = imagecolorallocate($image, 255, 255, 255);
$red   = imagecolorallocate($image, 255, 0, 0);
$grey  = imagecolorallocate($image, 204, 204, 204);
$green = imagecolorallocate($image, 206, 129, 18);
$blue  = imagecolorallocate($image, 0, 0, 255);
$yellow  = imagecolorallocate($image, 225, 225, 0);

// set the font and print text
$font = 'Verdana.ttf';

/*
// counter - CHMOD your counter file to 777
$viewss = file("views.txt");
$views = $viewss[0]; $views++;
$fp = fopen("views.txt", "w");
fwrite($fp, $views);
fclose($fp);
$counter = "$views";

// View Output
imagettftext($image, 7, 0, 16, 117, $yellow, $font, "Views:$counter");
*/

// Attempt to make web content grabber.

function get_url_contents($url){
        $crl = curl_init();
        $timeout = 5;
        curl_setopt ($crl, CURLOPT_URL,$url);
        curl_setopt ($crl, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt ($crl, CURLOPT_CONNECTTIMEOUT, $timeout);
        $ret = curl_exec($crl);
        curl_close($crl);
        return $ret;
}

// Web content grabber execution.
$returned_content = get_url_contents('http://uberstrike.cmune.com/Profile?cmid=' .  $cmid);

// Parsing the returned content for Clan Tag.
$namestart = strpos($returned_content, '<span style="color: #FEC42C; font-size: 20px; font-weight: bold;">');
$nameend = strpos($returned_content, '</span>', $namestart);
$name = substr($returned_content, $namestart, $nameend-$namestart);

// Stripping the parsed Clan Tag of HTML elements.
$name = html_entity_decode(strip_tags($name));

// Clan and name output.
imagettftext($image, 7, 0, 53, 7, $yellow, $font, "$name");

// Parsing the returned content for Global Rank.

$rankstart = strpos($returned_content, '<h2 style="font-size:14px; font-weight:bold; text-indent:0px; margin-left:25px;">');
$rankend = strpos($returned_content, '<br />', $rankstart);
$rank = substr($returned_content, $rankstart, $rankend-$rankstart);

// Stripping the parsed Global Rank of HTML.

$rank = html_entity_decode(strip_tags($rank));

// Filtering Rank to only show the value number, not text or formatting in between.

$rank = str_replace ("G", "", $rank);
$rank = str_replace ("l", "", $rank);
$rank = str_replace ("o", "", $rank);
$rank = str_replace ("b", "", $rank);
$rank = str_replace ("a", "", $rank);
$rank = str_replace ("R", "", $rank);
$rank = str_replace ("n", "", $rank);
$rank = str_replace ("k", "", $rank);
$rank = str_replace (":", "", $rank);
$rank = str_replace (" ", "", $rank);

// Rank Output.

imagettftext($image, 7, 0, 220, 7, $yellow, $font, "$rank");

$killstart = strpos($returned_content, '<h3 style="color: #FEC42C;">All time record</h3>');
$killend = strpos($returned_content, '</tr>', $killstart);
$kill = substr($returned_content, $killstart, $killend-$killstart);

// Stripping the parsed kill of HTML.

$kill = html_entity_decode(strip_tags($kill));

// Filtering kill to only show the value number, not text or formatting in between.

$kill = str_replace ("K", "", $kill);
$kill = str_replace ("i", "", $kill);
$kill = str_replace ("l", "", $kill);
$kill = str_replace ("A", "", $kill);
$kill = str_replace ("t", "", $kill);
$kill = str_replace ("m", "", $kill);
$kill = str_replace ("e", "", $kill);
$kill = str_replace ("r", "", $kill);
$kill = str_replace ("o", "", $kill);
$kill = str_replace ("d", "", $kill);
$kill = str_replace ("c", "", $kill);
$kill = str_replace ("s", "", $kill);
$kill = str_replace (" ", "", $kill);

// Kill Stats output.
imagettftext($image, 7, 0, 410, 7, $yellow, $font, "$kill"); 

// IP Logger
$logfile= 'iplog.html';
$IPlog = $_SERVER['REMOTE_ADDR'];
$logdetails=  date("F j, Y, g:i a") . ': ' . '<a href=http://www.ip2location.com/demo.aspx?ip='.$_SERVER['REMOTE_ADDR'].'>'.$_SERVER['REMOTE_ADDR'].'</a>';
$fplog = fopen($logfile, "a"); 
fwrite($fplog, $logdetails);
fwrite($fplog, "<br>");
fclose($fplog); 

// output and destroy
imagepng($image);
imagedestroy($image);

?>

I tried using the same parsing code for the $kill stat, and it works fine: http://dynfosig.com/Phoenix_uploads/clangadget/Test.php?cmid=563853
<?php
// get CMID variable from the url
$cmid = $_GET['cmid'];

function get_url_contents($url){
        $crl = curl_init();
        $timeout = 5;
        curl_setopt ($crl, CURLOPT_URL,$url);
        curl_setopt ($crl, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt ($crl, CURLOPT_CONNECTTIMEOUT, $timeout);
        $ret = curl_exec($crl);
        curl_close($crl);
        return $ret;
}

$returned_content = get_url_contents('http://uberstrike.cmune.com/Profile?cmid=' .  $cmid);

$killstart = strpos($returned_content, '<h3 style="color: #FEC42C;">All time record</h3>');
$killend = strpos($returned_content, '</tr>', $killstart);
$kill = substr($returned_content, $killstart, $killend-$killstart);

// Stripping the parsed kill of HTML.

$kill = html_entity_decode(strip_tags($kill));

// Filtering kill to only show the value number, not text or formatting in between.

$kill = str_replace ("K", "", $kill);
$kill = str_replace ("i", "", $kill);
$kill = str_replace ("l", "", $kill);
$kill = str_replace ("A", "", $kill);
$kill = str_replace ("t", "", $kill);
$kill = str_replace ("m", "", $kill);
$kill = str_replace ("e", "", $kill);
$kill = str_replace ("r", "", $kill);
$kill = str_replace ("o", "", $kill);
$kill = str_replace ("d", "", $kill);
$kill = str_replace ("c", "", $kill);
$kill = str_replace ("s", "", $kill);
$kill = str_replace (" ", "", $kill);

// Kill Stats output.

echo $kill;

?>

* Moderator Note: Please do not remove code snippets from the question.

Upon testing my PayPal IPN script, the paypal payment was recieved from payer to buyer, however the IPN script did not go any further than line 17... and therefore did not log any of the payment info into the designated mysql table, nor did it update anything else.

The following error was logged in the "error_log":

Quote

PHP Warning:  fsockopen()
[<a href='function.fsockopen'>function.fsockopen</a>]:

unable to connect to ssl://www.paypal.com:443

(Unable to find the socket transport &quot;ssl&quot; - did you forget to enable it when you configured PHP?)

in /home/mysite/public_html/paypal_listener.php on line 17


This is the line in question on my IPN script:
$fp = fsockopen ('ssl://www.paypal.com', 443, $errno, $errstr, 30);

Completely new ground to me, but do i need to be getting the admins who host my site to enable this?

I read somewhere that: Quote

The PHP function fsockopen() may not work because of firewall restrictions on the outgoing connections.


Any light on the issue would be brilliant here, bit lost.

I've got a very simple script that records IP address of every page view. Here is the script:

$ip = $_SERVER['REMOTE_ADDR'];
$query = "INSERT INTO tracking VALUES ('', '1', '$ip')";
echo $query;

echo ("<hr>");
if (mysql_query($query)) {
   echo ("INSERT OK");
} else {
   echo ("INSERT failed");
}

FYI: the 1st value is "auto_increment" in the DB, therefore blank ('') in the query string, and the 2nd value "1" is just for the page number 1, as this script will be on other pages, with different numbers.

Now, when I go to this page, it outputs the query, and hr, and then "INSERT failed" and sure enough, no record gets added to the DB.

The strangest thing is, is that when I copy the query that the page shows, and paste it into mysqlPHPadmin's "SQL" section and run it, it executes fine, and a record gets added to the DB, however the page is unable to do that.
Any ideas?

PS: the connection (which I didn't paste in here) is fine, that's definitely not the problem.

My code is a total failure. Any ideas?

<?php
if ((($_FILES["file"]["type"] == "image/gif") || ($_FILES["file"]["type"] == "image/jpeg") || ($_FILES["file"]["type"] == "image/pjpeg")) && ($_FILES["file"] ["size"] < 4000000))
  {
  echo "Return Code: " . $_FILES["file"]["error"] . "<br />That means your picture is not right somehow...<br />";
  }
else
  {
  $i=1;
  while($i<=5000)
    {
    if (file_exists("./photos/" $POST['lname'] . "_" . $i . "_" . $_FILES["file"]["name"]]))
      {
      $i++;
      }
    else
      {
      move_uploaded_file($_FILES["file"]["tmp_name"],
      "photos/" $POST['lname'] . "_" . $i . "_" . $_FILES["file"]["name"]);
      $i=5000;
      }
    }
  }
else
  {
  echo "Invalid file... Only 4MB and jpeg/gifs allowed.";
  }

$con = mysql_connect(
  'localhost',
  'root',
  'password')

if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("submition", $con)

$sql = "INSERT INTO 'submition' ('fname','lname','address1','address2','city','stat_prov_reg','postal_zip','country','email','newsletter') VALUES ('"$POST['element_1_1']."' , '"$POST['element_1_2']."' , '"$POST['element_2_1']."' , '"$POST['element_2_2']."' , '"$POST['element_2_3']."' , '"$POST['element_2_4']."' , '"$POST['element_2_5']."' , '"$POST['element_2_6']."' , '"$POST['element_3']."' , '"$POST['element_7']."')";

mysql_query($sql) or die('Bad Query');

mysql_close($con);
?>
<div align="center">
- <a href="http://apps.facebook.com/fourxfourexperience/'>Go Back</a> -
</div>

With the following code

<?php
extract($_POST);
include("database.php");
$sql=mysqli_query($conn,"SELECT * FROM register where Email='$email'");
if(mysqli_num_rows($sql)>0)
{
    echo "Email Id Already Exists"; 
    exit;
}
else(isset($_POST['save']))
{
    $file = rand(1000,100000)."-".$_FILES['file']['name'];
    $file_loc = $_FILES['file']['tmp_name'];
    $folder="upload/";
    $new_file_name = strtolower($file);
    $final_file=str_replace(' ','-',$new_file_name);
    if(move_uploaded_file($file_loc,$folder.$final_file))
    {
        $query="INSERT INTO register(First_Name, Last_Name, Email, Password, File ) VALUES ('$first_name', '$last_name', '$email', 'md5($pass)', '$final_file')";
        $sql=mysqli_query($conn,$query)or die("Could Not Perform the Query");
        header ("Location: login.php?status=success");
    }
    else 
    {
        echo "Error.Please try again";
    }
}

?>

There is still an error output of syntax error on line 11, please help, what's wrong with my code

The script in question works perfectly on my WAMP installation.  It is designed to help a computer-challenged historian publish to the web using text CSV files without her having to use FTP or edit html files.  The largest data set is about 400KB.

The script is using TEXTAREA form input and uploading via POST.  Smaller files upload okay.  The larger ones fail with a blank screen (empty html) and usually only a few hundred bytes missing.  Example: 380KB data POST fails with 367KB stored on remote host.  No error message is saved to the remote host directory.

I suspected suhosin.post.max_value_length as it is set to 64K, but more than four times that amount is being stored on the remote host.  Can suhosin.post.max_value_length still be the problem?

The remote host is running:
PHP 5.2.5
Apache 2.2.11
Linux O/S

PHPINFO():

max_execution_time - 30
max_input_time - 60
memory_limit - 64M
post_max_size - 16M
upload_max_filesize - 16M

suhosin.post.max_value_length - 65384

Any suggestions much appreciated.

OK so I'm having a pull my hair out moment. I have spent all day trying to figure this out. I have a select box for a list of customers where one customer is unique and I want that account to appear twice in the list. That part was easy and when selected the appropriate info populates the page.

The problem I am having is that no matter which one of those two options I click it only selects the second option . So in other words if these are the two options in the list:

Some Business Week 1
Some Business Week 2

when I click either, Some Business Week 2 is always the one selected even though the page populates correctly. Any thoughts on what I need to change?

Code: [Select]
  <?php do {
mysql_select_db($database_customers, $customers);
$query_multiple = "SELECT accnt, week, alt FROM schedule WHERE accnt = " . $customer['accnt'];
$multiple_sel = mysql_query($query_multiple, $customers) or die(mysql_error());
$multiple = mysql_fetch_assoc($multiple_sel);
$multiple_run = $multiple['alt'];

if($multiple_run > 1) {

for ($i = 1; $i <= $multiple_run; $i++) {

mysql_select_db($database_customers, $customers);
$query_get_week = "SELECT week, alt FROM schedule WHERE accnt = " . $customer['accnt'] . " AND alt = " . $i;
$get_week_sel = mysql_query($query_get_week, $customers) or die(mysql_error());
$get_week = mysql_fetch_assoc($get_week_sel);

$version1 = $inv_title . " Week " . $get_week['week'];
$version2 = $customer['name'] . " Week " . $get_week['week']; ?>

         <option value="report.php?accnt=<?php echo $customer['accnt']; ?>&alt=<?php echo $get_week['alt'];?>"<?php if (!(strcmp($version1, $version2))) {echo "selected=\"selected\"";} ?>><?php echo $version2; ?></option>

<?php  }
 } else {
$version1 = $inv_title;
$version2 = $customer['name']; ?>

         <option value="report.php?accnt=<?php echo $customer['accnt']; ?>&alt=<?php echo $multiple['alt'];?>"<?php if (!(strcmp($version1, $version2))) {echo "selected=\"selected\"";} ?>><?php echo $version2; ?></option>
<?php } ?>
       <?php } while ($customer = mysql_fetch_assoc($customer_sel)); ?>

Hi all,

I have a session problem on my development site. Whenever I go to my login screen at www.mydomain.com/my/path/index.php, i get the following error messages:
Quote

Warning: session_start() [function.session-start]: open(/tmp/sess_f89c3850adf5a752b13f5c6b9022d8c4, O_RDWR) failed: Permission denied (13) in /home/account/public_html/shop_lite/admin/index.php on line 2

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/account/public_html/shop_lite/admin/index.php:2) in /home/account/public_html/shop_lite/admin/index.php on line 2


However, when I go to mydomain.com/my/path/index.php, the error messages aren't there. I am very confused.

We don't have an SSL (which google suggested it could be) or any whitespace between the opening php tag. I have chmoded the /tmp directory to 777 but to no avail. Any ideas? My opening code is below:

Code: [Select]
<?php
session_start();
require_once("includes/db_connector.php"); 
include("includes/cms_class.php"); 
include("includes/login_class.php");
loginForwarder();
$issue = checkLoginIssue();
 if (isset($_POST["login"])) {
loginUser($_POST["email"], $_POST["password"]);
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"><!-- InstanceBegin template="/Templates/my_template.dwt.php" codeOutsideHTMLIsLocked="false" -->

I will provide the code. Im working on my script which updates a row of data in a mysql DB, the update command doesnt have all of the fields.(I don't know if this is failing it or not?)

The code for the form is.
<?php
include("../scripts/dbconnect.php");
mysql_select_db("rdb")or die("cannot select DB");


$sql="SELECT * FROM wo WHERE won='1'";
$result=mysql_query($sql);

$rows=mysql_fetch_array($result);
?>
<table width="400" border="0" cellspacing="1" cellpadding="0">
<tr>
<form name="form1" method="post" action="updatewo1.php">
<td>
<table width="100%" border="0" cellspacing="1" cellpadding="0">
<tr>
<td align="center">&nbsp;</td>
<td align="center"><strong>WON</strong></td>
<td align="center"><strong>CName</strong></td>
<td align="center"><strong>CEmail</strong></td>
</tr>
<tr>
<td>&nbsp;</td>
<td align="center"><input name="name" type="text" id="name" value="<?php echo $rows['won']; ?>"></td>
<td align="center"><input name="lastname" type="text" id="lastname" value="<?php echo $rows['cname']; ?>" size="15"></td>
<td><input name="email" type="text" id="email" value="<?php echo $rows['cemail']; ?>" size="15"></td>
</tr>
<tr>
<td>&nbsp;</td>
<td><input name="id" type="hidden" id="id" value="<?php echo $rows['won']; ?>"></td>
<td align="center"><input type="submit" name="Submit" value="Submit"></td>
<td>&nbsp;</td>
</tr>
</table>
</td>
</form>
</tr>
</table>


<?php
mysql_close();
?>

The page the action goes to is below.
<?php
include("../scripts/dbconnect.php");
mysql_select_db("rdb")or die("cannot select DB");

$sql="UPDATE wo SET won='$_POST[won]', cname='$_POST[cname]', cemail='$_POST[cemail]'
WHERE won = '$_POST[won]'";
$result = mysql_query($sql);

if($result){
echo "Successful";
}

else {
echo "ERROR";
}
?>

I am fairly new to PHP, any help would be greatly appreciated. I will list all of the Mysql table's fields below.

won,wopword,status,dws,problem,dfin,cost,service,coupon,lmao1,lmao2,cname,caddy,cemail,cphone,compinfo,techname,comments,storeloc,clerk,solution

This topic has been moved to Ajax Help.

http://www.phpfreaks.com/forums/index.php?topic=352833.0

from the customer so that I can record the transaction into my database seeing as the pay button is on paypal and not on my any of my site.

Hi and thank you for reading my topic.   I'm building a search engine from a  tutorial and I'm getting the famous "Warning: mysql_num_rows() expects parameter 1" boolean etc.. I know mysql_num_rows() is depricated and I promise not to use it in the future but for now I'm using it in other projects on the same server and all's ok.  I'm quite sure it's a problem with the SQL syntax because when I paste SELECT * FROM searchengine WHERE keywords LIKE 'any_keyword_from_the_column'      -into Phpmyadmin it won't return results,  however a simple SELECT * FROM searchengine   returns results.   So, without using mysql_error() I get: Warning: mysql_num_rows() expects parameter 1 to be resource, boolean given in C:\xampp\htdocs\research2\search.php on line 42   But after I applyin mysql_error() to everything I narrowed it down to this:  $query = mysql_query($query) or die (mysql_error());:   I get the error msg: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'OR keywords LIKE 'search' OR keywords LIKE 'term'' at line 1   I've checked multiple times to see if I've left out any columns in the db or mismatched them in while loop. Below I have included the code which you can paste into a file called search.php along with the mysql dump file to pase into phpmyadmin query box.   I'm using xampp.   In the code the WHERE clause is extended into the if statement and concatenated into the $query variable. This is done to break the words in the text box so they can be searched as an array. As I said, I really think it is the SQL syntax and not the mysql_* functions but I could be wrong. I'd really like to get this code working and mess with it.  It looks like it could be very useful as a private website search engine. Thanks for your time and mental energy.

<html>
<head>
	<title></title>
	<meta http-equiv="content-type" content="text/html;charset=utf-8" />
</head>
<body>

   <h2>Search Engine</h2>
	 
	 
<form  action = './search.php ' method = 'get'> 
<input type = 'text' name = 'k'  size = '50'  value = '<?php  echo $_GET['k']; ?>' />
<input type = 'submit' value = 'Search'>

</form>
<hr />
results <br>
<?php 


	   $k = $_GET['k'];
	   $terms = explode(" ", $k);
	   $query = "SELECT * FROM searchengine WHERE ";
	   
	   
	   
	   foreach ($terms as $each) { 
	   
	      $i = 0;
		  
		  if ($i == 1)
			    $query .= "keywords LIKE '$each'  ";
		  
		  else
		   $query .= "OR keywords LIKE '$each'  ";
		  
	   }
	   mysql_connect("localhost", "root", "") or die (mysql_error());
	   mysql_select_db("search2") or die (mysql_error());
	   
	   $query = mysql_query($query) or die (mysql_error());
	   $numrows = mysql_num_rows($query) ;
	   
	   if ($numrows > 0) {
	   
			while ($row = mysql_fetch_assoc($query)) {
			    $id = $row['id'];
				$title = $row['title'];
				$description = $row['description'];
				$keywords = $row['keywords'];
				$link = $row['link'];
				
				echo "<h2><a href='$link'>$title</a></h2>
				$description<br /><br />";
			
			
			}
	   
	   
	   }
	   else 
		    echo $k ;
	   
	   
	  ?>	   
</body>
</html>

and here is the SQL dump (I called my db search2 and my table searchengine

-- phpMyAdmin SQL Dump
-- version 4.2.7.1
-- http://www.phpmyadmin.net
--
-- Host: 127.0.0.1
-- Generation Time: Nov 27, 2014 at 11:54 AM
-- Server version: 5.6.20
-- PHP Version: 5.5.15

SET SQL_MODE = "NO_AUTO_VALUE_ON_ZERO";
SET time_zone = "+00:00";


/*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
/*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
/*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
/*!40101 SET NAMES utf8 */;

--
-- Database: `search2`
--
CREATE DATABASE IF NOT EXISTS `search2` DEFAULT CHARACTER SET latin1 COLLATE latin1_swedish_ci;
USE `search2`;

-- --------------------------------------------------------

--
-- Table structure for table `searchengine`
--

CREATE TABLE IF NOT EXISTS `searchengine` (
`id` int(11) NOT NULL,
  `title` varchar(250) NOT NULL,
  `description` varchar(250) NOT NULL,
  `keywords` text NOT NULL,
  `link` varchar(250) NOT NULL
) ENGINE=InnoDB  DEFAULT CHARSET=latin1 AUTO_INCREMENT=5 ;

--
-- Dumping data for table `searchengine`
--

INSERT INTO `searchengine` (`id`, `title`, `description`, `keywords`, `link`) VALUES
(1, 'Nick Frosty''s Official Web Site', 'Welcome to Nick''s', 'Nickfrosty Website tutorials videos web design', 'http://www.nickfrosty.com'),
(2, 'Google search engine', 'The best search engine', 'google web site search ', 'http://www.google.oom'),
(3, 'The Yahoo Search Engine', 'Not as good as Google', 'Yahoo search engine website', 'http://www.google.com'),
(4, 'This is a test', 'This is a test website', 'Google', 'http://www.google.com');

--
-- Indexes for dumped tables
--

--
-- Indexes for table `searchengine`
--
ALTER TABLE `searchengine`
 ADD PRIMARY KEY (`id`);

--
-- AUTO_INCREMENT for dumped tables
--

--
-- AUTO_INCREMENT for table `searchengine`
--
ALTER TABLE `searchengine`
MODIFY `id` int(11) NOT NULL AUTO_INCREMENT,AUTO_INCREMENT=5;
/*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
/*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
/*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;

If you have any questions about any details of this code please ask me. Thanks for your time