PHP - Adding A Photo On The Php Subpage (path Problem)

I have a script.. it works fine on my localhost.. now i am trying to work it with on my remote server.. the script reads the folder in my c drive and shows me the file on display here is the code
<?php

$main_dir ="C:\\xampp\\htdocs\\xtrajam";
$main_open = opendir($main_dir);
while(($main_file = readdir($main_open)) != FALSE)
{
echo $main_file."<br />";
}

closedir($main_open);
?>


Now the thing is this works fine on local host as it can easy access the path C:\\xampp\\htdocs\\xtrajam
Now i want this path to be accessed sumhow wen i try it on my remote server.. how should i do that like when i run the script online it reads the contents from my c drive directory..? is it sumhow possible?

Hi there, i follow a tutorial from www.phpwebcommerce.com and i'm having path problem for 'add to cart' button.

Demo from phpwebcommerce: http://www.phpwebcommerce.com/plaincart/index.php
I have modified some changes, i'm putting the 'add to cart' button to 1st level instead of 2nd level. Example, under all category (car & manga) i choose car, then inside car category list there is a 'add to cart' button under all car product  instead of clicking inside and show 'add to cart' button.

productDetail.php:
Code: [Select]
<?php
if (!defined('WEB_ROOT')) {
exit;
}

$product = getProductDetail($pdId, $catId);

// we have $pd_name, $pd_price, $pd_description, $pd_image, $cart_url
extract($product);
?>
<table width="100%" border="0" cellspacing="0" cellpadding="10">
 <tr>
  <td align="center"><img src="<?php echo $pd_image; ?>" border="0" alt="<?php echo $pd_name; ?>" width="230" height="170"></td>
  <td valign="middle">
<strong><?php echo $pd_name; ?></strong><br>
Price : <?php echo displayAmount($pd_price); ?><br>
<?php
// if we still have this product in stock
// show the 'Add to cart' button
if ($pd_qty > 0) {
?>
<input type="button" name="btnAddToCart" value="Add To Cart &gt;" onClick="window.location.href='<?php echo $cart_url; ?>';" class="addToCartButton">
<?php
} else {
echo 'Out Of Stock';
}
?>
  </td>
 </tr>
 <tr align="left">
  <td colspan="2"><?php echo $pd_description; ?></td>
 </tr>
</table>

I copy this code out from productDetail.php:
Code: [Select]
<input type="button" name="btnAddToCart" value="Add To Cart &gt;" onClick="window.location.href='<?php echo $cart_url; ?>';">


productList.php:
Code: [Select]
<?php
if (!defined('WEB_ROOT')) {
exit;
}

$productsPerRow = 2;
$productsPerPage = 8;

//$productList    = getProductList($catId);
$children = array_merge(array($catId), getChildCategories(NULL, $catId));
$children = ' (' . implode(', ', $children) . ')';

$sql = "SELECT pd_id, pd_name, pd_price, pd_thumbnail, pd_qty, c.cat_id
FROM tbl_product pd, tbl_category c
WHERE pd.cat_id = c.cat_id AND pd.cat_id IN $children 
ORDER BY pd_name";
$result     = dbQuery(getPagingQuery($sql, $productsPerPage));
$pagingLink = getPagingLink($sql, $productsPerPage, "c=$catId");
$numProduct = dbNumRows($result);

// the product images are arranged in a table. to make sure
// each image gets equal space set the cell width here
$columnWidth = (int)(100 / $productsPerRow);
?>
<table width="100%" border="0" cellspacing="0" cellpadding="20">

<?php 
if ($numProduct > 0 ) {

$i = 0;
while ($row = dbFetchAssoc($result)) {

extract($row);
if ($pd_thumbnail) {
$pd_thumbnail = WEB_ROOT . 'images/product/' . $pd_thumbnail;
} else {
$pd_thumbnail = WEB_ROOT . 'images/no-image-small.png';
}

if ($i % $productsPerRow == 0) {
echo '<tr>';
}

// format how we display the price
$pd_price = displayAmount($pd_price);

echo "<td width=\"$columnWidth%\" align=\"center\"><a href=\"" . $_SERVER['PHP_SELF'] . "?c=$catId&p=$pd_id" . "\"><img src=\"$pd_thumbnail\" border=\"0\" width=\"230\" height=\"170\"><br>$pd_name</a><br>Price : $pd_price<br>
<input type=\"button\" name=\"btnAddToCart\" value=\"Add To Cart &gt;\" onClick=\"window.location.href='<?php echo $cart_url; ?>';\" >";

       

// if the product is no longer in stock, tell the customer
if ($pd_qty <= 0) {
echo "<br>Out Of Stock";
}

echo "</td>\r\n";

if ($i % $productsPerRow == $productsPerRow - 1) {
echo '</tr>';
}

$i += 1;
}

if ($i % $productsPerRow > 0) {
echo '<td colspan="' . ($productsPerRow - ($i % $productsPerRow)) . '">&nbsp;</td>';
}

} else {
?>
<tr><td width="100%" align="center" valign="center">No products in this category</td></tr>
<?php
}
?>
</table>
<p align="center"><?php echo $pagingLink; ?></p>

The code i copy from productDetail.php i paste in productList.php at line48, it show the 'add to cart' button but when i click on it, it cant add to my shopping cart and it show error:

Notice: Undefined variable: cart_url in C:\Domains\xxxxxxxx\wwwroot\xxxxxxxx\plaincart\include\productList.php on line 48
Notice: Undefined variable: cart_url in C:\Domains\xxxxxxxx\wwwroot\xxxxxxxx\plaincart\include\productList.php on line 48
Notice: Undefined variable: cart_url in C:\Domains\xxxxxxxx\wwwroot\xxxxxxxx\plaincart\include\productList.php on line 48
Notice: Undefined variable: cart_url in C:\Domains\xxxxxxxx\wwwroot\xxxxxxxx\plaincart\include\productList.php on line 48

Will Appreciate For Any Help....Thank you in advanced & sorry for the bad English.

So, I am your typical newbie to php. I am usually doing more design stuff, but now I am diving into PHP. The script in question is made for a user to upload an image to a respective directory. Also the path, category, and 2 tags representing the image will be uploaded to a mySQL database.

My problem is that I have pieced together some freeware scripts that I have found in order to accomplish my ultimate goal. I need the form to be processed on the same page, because I don't want to redirect users. I also need to upload the respective information to the database. Right now, when you upload an image it only seems to be processing a part of the form, and does not upload any of the information at all. Can someone spot the many things that I am doing wrong and provide me with some direction?

I have two files in question

image_upload.php (Sorry about all of the code)

<?php
require_once 'upload_config.php';

function VerifyForm(&$values, &$errors)
{

// Do all necessary form verification
    if($clear_folder_before_upload){
        $mydirectory = myUploadDir();
        EmptyDir($mydirectory);
    }

    $uploaded_file_counter=0;
    $UploadLimit = $_POST['counter'];
    
    for($i=0;$i<=$UploadLimit;$i++){
        $file_tag='filename'.$i;
        $filename=$_FILES[$file_tag]['name'];

            if($filename!=null) {
            $rand=time();
            $str="$rand$filename";

            // set folder name in here.
            $filedir= myUploadDir();

            //change the string format.
            $string= $filedir.$str;
            $patterns[0] = "/ /";
            $patterns[1] = "/ /";
            $patterns[1] = "/ /";
            $replacements[1] = "_";
            $dirname=strtolower(preg_replace($patterns, $replacements, $string));
            //end of changing string format

            //checking the permitted file types
                            if($check_file_extentions)    {
                            $allowedExtensions = allowedfiles();
                                foreach ($_FILES as $file) {
                                                    if ($file['tmp_name'] > '') {
                                                      if (!in_array(end(explode(".",
                                                            strtolower($file['name']))),
                                                            $allowedExtensions)) {
                                                            $fileUploadPermission=0;
                                                      }
                                                      else
                                                      {
                                                          $fileUploadPermission=1;
                                                      }
                                                    }
                                                  }
                            }
                            else{
                                $fileUploadPermission=1;
                            }
            //end of checking the permitted file types

                if($fileUploadPermission){
                    if(move_uploaded_file($_FILES[$file_tag]['tmp_name'],$dirname)) {
                            echo "<img src='$dirname'>";
                            $uploaded_file_counter+=1;
                        }
                }
                
            }

    }
 
if($uploaded_file_counter==0){
     echo "<br /> <b style='font-weight:bold;color:red'>Oops! Please select an image file</b>";
}else{
     echo "<br /> <b>You requested ".$i." image files to upload and ".$uploaded_file_counter." files uploaded sucessfully</b>";
echo $filename0;
$contentdiv = 'Upload succesful! Upload Again';
}


}

function DisplayForm($values, $errors)
{
?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>JayGilford.com :: Name form example</title>
    <script type="text/javascript" src="js/jquery-1.4.2.js"></script>
    <script type="text/javascript" src="js/jquery-ui-1.8.custom.min.js"></script>

    <style type="text/css">
        div#upload_box_wrapper{width:350px;text-align:center; float: left;font-family: verdana; font-size: 12px;padding: 5px 5px 5px 5px; color: black;}
        div#upload_box_wrapper #upload_title_text{text-align:left;width: 100%;display: block;border: 0px solid green; margin-bottom: 5px;}
        div#upload_box_wrapper #FileUploadDiv{display: block;width: 98%;border: 0px solid green; text-align: left;padding: 0px 0px 0px 0px;}
        div#upload_box_wrapper p.add-new-upload-box{float: left;width: 100%;text-align: left;}
        div#upload_box_wrapper a.add-new-upload-link{font-weight: bold;font-size: 13px;padding-right: 3px;text-decoration: none; color: black;}
        div#upload_box_wrapper .upload-button{border: 0px solid lightgreen;height:30px; width:120px;cursor: pointer;background:url(./images/upload_button.png) no-repeat center left; color: white;} 
    </style>
</head>
<body>
<form method='post' action='' enctype='multipart/form-data'>
        <div id="upload_box_wrapper">

                <div id="upload_title_text">Image Upload:</div>
                    <div id="FileUploadDiv" DivValue="0">
                        <input name='filename0' type='file' id='filename'>
                        <select name="img_category">
<option value="Vacation">Vacation</option>
<option value="Holiday">Holiday</option>
</select>
                        <input name="tag1" type="text" id="tag1">
                        <input name="tag2" type="text" id="tag2">
                    </div>
                    <input type="hidden" value="0" id="counter" name="counter">
                    <div align='left'>
                        <input type='submit' name='submit' value='Upload Now!' class="upload-button">
                    </div>
</div>
</form>

</body>
</html>


<?php
}

function ProcessForm($values)
{

$filename0 = $_POST['filename'];
$filetype = $_POST[''];
$img_category = $_POST['img_category'];
$tag1 = $_POST['tag1'];
$tag2 = $_POST['tag2'];

////////
//figure out the image??
/////

session_start();
$img = $_POST[ 'imglink' ];
$filetypes = array( 'gif','jpg','jpeg','png' );
++$filetypes;
$filetype = strstr( $img, '.' );
if( $filetype != $filetypes )
{ echo 'not supported'; }
session_register( 'Image' );


$Img = $_SESSION[ 'Image' ];
mysql_query( "INSERT into `images` ( `image_id`, `filename`, `filetype`, `url`, `img_category`, `tag1`, `tag2` ) 
 VALUES ( '', '$filename0', '$filetype', '$Img', '$img_category', '$tag1', '$tag2' )" );
session_destroy();
mysql_close( $DB );
 
// Replace with actual page or redirect :P

}
 
if ($_SERVER['REQUEST_METHOD'] == 'POST')
{
$formValues = $_POST;
$formErrors = array();
 
if (!VerifyForm($formValues, $formErrors))
DisplayForm($formValues, $formErrors);
else
ProcessForm($formValues);
}
else
DisplayForm(null, null);
?>


and the upload_config.php file


<?php
///////////////////////////////////////////////////////////////////////////
//establish mysql connection (I have this set correctly on the original file)
///////////////////////////////////////////////////////////////////////////
$db = mysql_connect('RESPECTIVE', 'MYSQL', IDANDPW');
 
if (!$db) {
    echo "Unable to establish connection to database server";
    exit;
}
 
if (!mysql_select_db('chad_images', $db)) {
    echo "Unable to connect to database";
    exit;
}

///////////////////////////////////////////////////////////////////////////
// set your upload directory name in here.
///////////////////////////////////////////////////////////////////////////
function myUploadDir(){
    $myUploadDir = "./upload/";
    return $myUploadDir;
}

///////////////////////////////////////////////////////////////////////////
// if you want to imposs file type rescriction then
// $check_file_extentions=1  or if you want to off this option then
// $check_file_extentions=0
///////////////////////////////////////////////////////////////////////////

$check_file_extentions = 1;

////////////////////////////////////////////////////////////////////////////
// set your allowed type in the array.
// examples: zip, pdf, psd and many more.
//
////////////////////////////////////////////////////////////////////////////
function allowedfiles()
                {
                        $allowed_file_extensions=array("png","jpg","gif","bmp");
                        return $allowed_file_extensions;
                }

///////////////////////////////////////////////////////////////////////////
// if you want to delete all the files in uploaded directory
// $clear_folder_before_upload = 1  or if you want to off this option then
// $clear_folder_before_upload = 0
///////////////////////////////////////////////////////////////////////////

$clear_folder_before_upload = 1;

function EmptyDir($dir) {

    $handle=opendir($dir);
    while (($file = readdir($handle))!==false) {
    @unlink($dir.'/'.$file);
    }
    closedir($handle);
}

?>


Any help would be greatly appreciated!
 

At the moment I am getting this error message when I am trying to add a record:

Quote

mysqli_stmt_bind_param() [function.mysqli-stmt-bind-param]: Number of elements in type definition string doesn't match number of bind variables


Below is my code

Code: [Select]
<?php

ini_set('display_errors',1);
error_reporting(-1);

require_once ('./includes/config.inc.php');

require_once (MYSQL);

$add_cat_errors = array();

if ($_SERVER['REQUEST_METHOD'] == 'POST')
{
// Check for a name:
if (empty($_POST['product'])) {
$add_cat_errors['product'] = 'Please enter the name!';
}

// Check for a description:
if (empty($_POST['prod_descr'])) {
$add_cat_errors['prod_descr'] = 'Please enter the description!';
}

// Check for a category:
if (!isset($_POST['cat']) || !filter_var($_POST['cat'], FILTER_VALIDATE_INT, array('min_range' => 1))) {
$add_cat_errors['cat'] = 'Please select a category!';
}

// Check for a price:
if (empty($_POST['price']) || !filter_var($_POST['price'], FILTER_VALIDATE_FLOAT) || ($_POST['price'] <= 0)) {
$add_cat_errors['price'] = 'Please enter a valid price!';
}

// Check for a category:
if (!isset($_POST['directory']) || !filter_var($_POST['directory'], FILTER_VALIDATE_INT, array('min_range' => 1))) {
$add_cat_errors['directory'] = 'Please select a directory!';
}

// Check for an image:
if (is_uploaded_file ($_FILES['image']['tmp_name']) && ($_FILES['image']['error'] == UPLOAD_ERR_OK)) {

$file = $_FILES['image'];

$size = ROUND($file['size']/1024);

// Validate the file size:
if ($size > 512) {
$add_cat_errors['image'] = 'The uploaded file was too large.';
} 

// Validate the file type:
$allowed_mime = array ('image/jpeg', 'image/JPG', 'image/jpg');
$allowed_extensions = array ('.jpg', 'jpeg');
$image_info = getimagesize($file['tmp_name']);
$ext = substr($file['name'], -4);
if ( (!in_array($file['type'], $allowed_mime)) 
||   (!in_array($image_info['mime'], $allowed_mime) ) 
||   (!in_array($ext, $allowed_extensions) ) 
) {
$add_cat_errors['image'] = 'The uploaded file was not of the proper type.';
} 

// Move the file over, if no problems:
if (!array_key_exists('image', $add_cat_errors)) {

// Create a new name for the file:
$new_name = (string) sha1($file['name'] . uniqid('',true));

// Add the extension:
$new_name .= ((substr($ext, 0, 1) != '.') ? ".{$ext}" : $ext);
//$new_name = $dir . '/' . $new_name;
$dest =  "../db/images/$new_name";

// Move the file to its proper folder but add _tmp, just in case:

//$dest =  "../db/images/$new_name";
$dirs = array('full_heads', 'human_hair', 'lip_tattoos', 'ponytails', 'synthetic_hair');

if (move_uploaded_file($file['tmp_name'], $dest)) {

// Store the data in the session for later use:
$_SESSION['image']['new_name'] = $new_name;
$_SESSION['image']['file_name'] = $file['name'];

// Print a message:
echo '<h4>The file has been uploaded!</h4>';

} else {
trigger_error('The file could not be moved.');
unlink ($file['tmp_name']);
}

} // End of array_key_exists() IF.

} elseif (!isset($_SESSION['image'])) { // No current or previous uploaded file.
switch ($_FILES['image']['error']) {
case 1:
case 2:
$add_cat_errors['image'] = 'The uploaded file was too large.';
break;
case 3:
$add_cat_errors['image'] = 'The file was only partially uploaded.';
break;
case 6:
case 7:
case 8:
$add_cat_errors['image'] = 'The file could not be uploaded due to a system error.';
break;
case 4:
default: 
$add_cat_errors['image'] = 'No file was uploaded.';
break;
} // End of SWITCH.

} // End of $_FILES IF-ELSEIF-ELSE.



// Check for a stock:
if (empty($_POST['stock']) || !filter_var($_POST['stock'], FILTER_VALIDATE_INT, array('min_range' => 1))) {
$add_cat_errors['stock'] = 'Please enter the quantity in stock!';
}

if (empty($add_cat_errors))
{
$query = "INSERT INTO product (product, prod_descr, catID, price, dirID, image, stock) VALUES (?, ?, ?, ?, ?, ?, ?)";
// Prepare the statement:
$stmt = mysqli_prepare($dbc, $query);
// For debugging purposes:
// if (!$stmt) echo mysqli_stmt_error($stmt);

// Bind the variables:
mysqli_stmt_bind_param($stmt, 'sssssi', $name, $desc, $_POST['cat'], $_POST['price'], $_POST['directory'], $_SESSION['image']['new_name'], $_POST['stock']);

// Make the extra variable associations:
$name = strip_tags($_POST['product']);
$desc = strip_tags($_POST['prod_descr']);
// Execute the query:
mysqli_stmt_execute($stmt);

if (mysqli_stmt_affected_rows($stmt) == 1) { // If it ran OK.

// Print a message:
echo '<h4>The product has been added!</h4>';

// Clear $_POST:
$_POST = array();

// Clear $_FILES:
$_FILES = array();

// Clear $file and $_SESSION['image']:
unset($file, $_SESSION['image']);

} else { // If it did not run OK.
trigger_error('The product could not be added due to a system error. We apologize for any inconvenience.');
unlink ($dest);
}

} // End of $errors IF.

} else { // Clear out the session on a GET request:
unset($_SESSION['image']);
} // End of the submission IF.

require_once ('./includes/form_functions.inc.php');
?>

<form enctype="multipart/form-data" action="add_product.php" method="post" accept-charset="utf-8">

<input type="hidden" name="MAX_FILE_SIZE" value="524288" />

Product<br /><?php create_form_input('product', 'text', $add_cat_errors); ?>
           
            Description<br /><?php create_form_input('prod_descr', 'textarea', $add_cat_errors); ?>
           
Category<br /><select name="cat"<?php if (array_key_exists('cat', $add_cat_errors)); ?>>
<option>Select One</option>
<?php // Retrieve all the categories and add to the pull-down menu:
$q = 'SELECT catID, cat FROM category ORDER BY cat ASC';
$r = mysqli_query ($dbc, $q);
while ($row = mysqli_fetch_array ($r, MYSQLI_NUM)) {
echo "<option value=\"$row[0]\"";
// Check for stickyness:
if (isset($_POST['cat']) && ($_POST['cat'] == $row[0]) ) echo ' selected="selected"';
echo ">$row[1]</option>\n";
}
?>
</select><?php if (array_key_exists('cat', $add_cat_errors)) echo $add_cat_errors['cat']; ?>
           
            Price<br /><?php create_form_input('price', 'text', $add_cat_errors); ?>
           
            Directory<br /><select name="directory"<?php if (array_key_exists('directory', $add_cat_errors)); ?>>
<option>Select One</option>
<?php // Retrieve all the categories and add to the pull-down menu:
$q = 'SELECT dirID, directory FROM directory ORDER BY directory ASC';
$r = mysqli_query ($dbc, $q);
while ($row = mysqli_fetch_array ($r, MYSQLI_NUM)) {
echo "<option value=\"$row[0]\"";
// Check for stickyness:
if (isset($_POST['directory']) && ($_POST['directory'] == $row[0]) ) echo ' selected="selected"';
echo ">$row[1]</option>\n";
}
?>
</select><?php if (array_key_exists('directory', $add_cat_errors)) echo $add_cat_errors['directory']; ?>
</select>
           
            Image<br /><?php

// Check for an error:
if (array_key_exists('image', $add_cat_errors)) {

echo $add_cat_errors['image'] . '<br /><input type="file" name="image"/>';

} else { // No error.

echo '<input type="file" name="image" />';

// If the file exists (from a previous form submission but there were other errors),
// store the file info in a session and note its existence:
if (isset($_SESSION['image'])) {
echo "<br />Currently '{$_SESSION['image']['file_name']}'";
}

} // end of errors IF-ELSE.
 ?>
          <br />

Stock<br /><?php create_form_input('stock', 'text', $add_cat_errors); ?>


<input type="submit" value="Add This Product" class="button" />


</fieldset>

</form>

How can I please solve this? Because I have checked my code and I have no idea where I am going wrong

Hi,
how to make this form + php to make it work this way

from the drop-down box choose the database title, or ID, and then the form in which I write some content will be added to the database that matches the title or ID that is sometimes so as not to invade a mistake and content that I type is not added to another title or ID

I created something like this:

<?php
$db = new mysqli('localhost','xxxxx','xxxx','xxxx');
mysqli_query($db,'SET NAMES `utf8`');
$sqlnowe = mysqli_query($db,'SELECT * FROM `cc` ORDER BY `id` DESC  ');

?>

<form action="formu.php" method="post">
<select name="tytul">
<?php while ($rownowe = mysqli_fetch_array($sqlnowe)) { ?>
<option><? echo $rownowe['tytul']; ?></option><?php };?>

</select>


opismax:<br />
<input type="text" name="opismax" /><br />
<textarea name="opismax" cols="50" rows="10">Prosz&#281;, wpisz tutaj jaki&#347; komentarz...</textarea>

<input type="submit" value="dodaj" />
</form>

<?php

// odbieramy dane z formularza
$tytul = $_POST['tytul'];
$opismax = $_POST['opismax'];

if($tytul and $opismax) {
    
   
    
    // dodajemy rekord do bazy
    $ins = mysqli_query("INSERT tytul='$tytul' INTO publications SET  opismax='$opismax'");
    
    if($ins) echo "Good";
    else echo "Bad";
    

}

?>

Hi Guys,

I wonder If I can call on this forums help once again.

I am trying to add salt to my md5 password hash. However I think I am getting the syntax slightly wrong as it is not working properly.

It works in the fact that when someone logs in and they have a 1 next to the member type it will direct them to the teachers page . However if no values are entered into the log in form and someone clicks log in it will still direct them to the students page when I thought it would direct them to log in failed.

The code for the log in form is:
Code: [Select]
//Sanitize the POST values
$login = clean($_POST['login']);
$password = clean($_POST['password']);
$salt = "salt";
$EncryptedPassword=md5($password, $salt);



//Create query
$qry="SELECT * FROM users WHERE username='$login' AND password='$EncryptedPassword'";
$result=mysql_query($qry);

//Check whether the query was successful or not
if($result) {
if(mysql_num_rows($result) == 1) {
//Login Successful
session_regenerate_id();
$member = mysql_fetch_assoc($result);
$_SESSION['SESS_MEMBER_ID'] = $member['id'];
$_SESSION['SESS_FIRST_NAME'] = $member['FirstName'];
$_SESSION['SESS_LAST_NAME'] = $member['LastName'];
$_SESSION['SESS_LAST_NAME'] = $member['Member_Type'];
session_write_close();
}
//if the member has an id equal to 0 send them to the member page
if($member['Member_Type'] == 0){
header("Location: Student-Page.php");
//if the member has an id equal to 1 send them to the admin page
} elseif($member['Member_Type'] == 1){
header("Location: Teachers-Page.php");
}
// regardless of the outcome, we need to exit, so it can be done once after both checks
exit();
} else {
//Login failed
header("location: login-failed.php");
exit();
}




In case you need it the code for the registration form where the password is originally salted upon creation is:

Code: [Select]
<?php
//Start session
session_start();

//Include database connection details
require_once('config.php');

//Connect to mysql server
$link = mysql_connect(DB_HOST, DB_USER ,DB_PASSWORD);


if(!$link) {
die('Failed to connect to server: ' . mysql_error());
}

//Select database
$db = mysql_select_db(DB_DATABASE);
if(!$db) {
die("Unable to select database");
}

//Function to sanitize values received from the form. Prevents SQL injection
function clean($str) {
$str = @trim($str);
if(get_magic_quotes_gpc()) {
$str = stripslashes($str);
}
return mysql_real_escape_string($str);
}

//Sanitize the POST values
$username = clean($_POST['username']);
$FirstName = clean($_POST['FirstName']);
$LastName = clean($_POST['LastName']);
$Member_Type = clean($_POST['Member_Type']);
$password = clean($_POST['password']);
$Cpassword = clean($_POST['Cpassword']);
$salt = "salt";
$EncryptedPassword = md5($password,$salt);

//Check for duplicate login ID
if($username != '') {
$qry = "SELECT * FROM users WHERE username='$username'";
$result = mysql_query($qry);
if($result) {
if(mysql_num_rows($result) > 0) {

}
@mysql_free_result($result);
}
else {
//die("query failed");
}
}


//Create INSERT query
$qry = "INSERT INTO users(username, password, FirstName, LastName, Member_Type) 
VALUES('$username','$EncryptedPassword','$FirstName','$LastName','$Member_Type')";
$result = @mysql_query($qry);

//Check whether the query was successful or not
if($result) {
header("location: register-success.php");
exit();
}else {
die("Query Failed");
}
?>

If someone could take a look and point me in the right direction. Also if there are any other mistakes let me know I would be very grateful.

Thanks in advance.

Edd 

In ubuntu 19.04 with php version 7.2 , i want to add mysql user with php when i run the code below get the error:

SQLSTATE[HY000] [1698] Access denied for user 'root'@'localhost'

I didn't set any password for root , this is php code:

<?php

$server = "localhost";
$dbuser = "root";
$dbpassword = "";

try {
    $connection = new PDO("mysql:host=$server", $dbuser, $dbpassword);


    $connection->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
    $user = 'test' . '@' . 'localhost';

    $sqlQuery = "CREATE USER . $user . ";

    $connection->exec($sqlQuery);

    echo "User created successfully!";
    }
catch(PDOException $e){
	  echo $sqlQuery . "<br>" . $e->getMessage();
}

$connection = null;
?>

 

Good day guyz... I dont know why this code does not work...

the connection is fine, the database is also fine it works with the localhost, when i upload it on free hosting site like 000webhost and infinityfree this is not working.. the database on free hosting site are also working also the connection is code, just only this code i cant figure it out..

else{

$sql = "INSERT INTO .$name (TrxID, ProductName, Price, ProductImage, PurchasedDate, PurchasedStatus) VALUES (?, ?, ?, ?, ?, ?)";

$stmt = mysqli_stmt_init($conn2);

if(!mysqli_stmt_prepare($stmt, $sql)){

echo 'connection error';

}

mysqli_stmt_bind_param($stmt, "isssss", $val, $PName, $Price, $PImage, $PDate, $PStatus);

mysqli_stmt_execute($stmt);

mysqli_stmt_close($stmt);

header("location: ../customer/cart.html");

exit();

}

}

 

Good day!   I'm just a newbie in php and seeking for some assistance with my project as a beginner, as for now i do know how to insert data's in my database, but i'm having problem with this one;   Problem:  My page requirements is that it must have a button to initiate start time ex. 0:00:00 <-- starting time. Next one is, this page needs to change the amount the client need to pay for ex. For every 1 hr, they should be an amount of 60.00 and for another extended time for ex. 1:01 (1 hour and 1minute) the amount tendered must be 60+55 so total of 115.00. and if the timer hits 1:31 the amount should be in total of 120.00. and so on and so forth. there's a button that will initiate stop time and will automatically save all the data to the database.. I'm researching this for a week now, and trying some functions and codes but nothing worked.. I guess I need to study more harder with php since it's my first time to study this one.   Any help will be appreciated.. thanks and god bless!

I want to users can setup time difference in hours, but I dont know how to solve this. Here is script for localtime:

  $date_format = 'd.m.Y H:i';
  $timezone = new DateTimeZone("Europe/Berlin");
  $date = new DateTime();
  $date->setTimezone($timezone);
echo "<div align='right'> Today is " . $date->format("$date_format") . "</div>";


Now I have $user_time in config and users can change this value (example: +1 hours, -3 hours etc...). Users time settings ($user_time) are saved in database.

How to display time based on user_time (ex. $date->format("$date_format")  ) to display message like this:
Today is 16.09.2010 18 (+$user_time) : 40

I'm having a problem understanding how to import more than one photo in a list of up to 20 photos.  I can only import 1 photo from a comma delimited csv with a pipe between each photo url.

<?
function getImg($value,$userid, $stocknum){
   $photoStr = '';
   if($value !=''){
      $photoURLs = explode('|', $value);
      for($i=0; $i<count($photoURLs);$i++){
         $url = $photoURLs[$i];
         $j = $i+1;
         if (@copy($url, "../upload/".$userid."/".$userid."_".$stocknum."_".$j.".jpg")) {
             $photoStr .= $userid."_".$stocknum."_".$j.".jpg|";
         }
      }
   }
   return $photoStr;
}
?>
 
And after csv and sql
<? if($img){
     $img = rtrim($img, '|');
     $imgArray = explode('|', $img);
     $imgIndex = 1;
     foreach ($imgArray AS $imgItem){
      $db->query("UPDATE `stockitem` SET img".$imgIndex."= '$imgItem' where stocknum='$stocknum'","" , __FILE__, __LINE__);
      $imgIndex++;
     }
    }
?>
Any help would be appreciated.

Hi guys,

Happy New Year

http://www.phpfreaks.com/forums/php-coding-help/?action=post

How can i get the path

http://www.phpfreaks.com/forums


thanks,

Hi all, i was wondering if someone could point me in the right direction on how to create the following.
After someone uploaded a photo than Cut out only his head in a fixed square say 90x120 pix (of a larger picture). I have seen some on the internet but most of them use flash and i rather use javascript or no javascript at all. Can this be done with GD library for instance where you just give the coordinates and the size of a square. (if this can be done automated i love to hear it) I have seen one where someone should pinpoint the eyes. IF someone has experience with this or a general idea on what techniques to use let me know
I bet there are loads of way to do this but the most light weight technique would be great.

Something like the attached image

i am in the process of creating an auction site.

However the images do not show , just the placeholder. Can anyone indicate where I have gone wrong ?

 

 

i am using this script to enter the items into the Database

html>
<head><title></title>    

<link rel="stylesheet" type="text/css" href="style.css">
         
</head>

<body>
<?php 
echo "<img src='auction_logo.png' id='logo'/>";
echo "<br>";
echo "<form class='add_item_form' action='check_item.php' method='POST'  enctype='multipart/form-data'>";

if(isset($_GET["item"]))
{

if($_GET["item"]=="duplicate")
{
    echo "<h4>Already entered this item</h4>";
    echo "<br>";
    echo "<h4>Please try again</h4>";
 
}

else if($_GET["item"]=="successful")
{
echo "<h4>Successfully added an item!</h4>";
} 

}
 
else
{
echo "<h4>Please add an item</h4>";
}

echo "<label for='item_name' class='label'>Item Name:</label>";
echo "<input class='text'  type='text' name='item_name'/>";
echo "<br>";
echo "<label for='item_description'  class='label'>Item Description:</label>";
echo "<input class='text'  type='text' name='item_description'>";
echo "<br>";
echo "<label for='endtime'  class='label'> Ending Bid Time: </label>";
echo "<input  class='text'  type='text' name='endtime'>";
echo "<br>";
echo "<label for='item_pic'  class='label'>Item Pictu </label>";
echo "<input class='text'  type='file' value='item_pic' name='item_pic'>";
echo "<br>";
echo "<input class='submit' type='submit' value='Add Item'/>";

echo "</form>";
?>

</body>
</html>

 

This script displays the items : 

 

<html>
<head><title></title> 
 

 <link rel="stylesheet" type="text/css" href="style.css">
 
</head>

<body>
<?php 

session_start();

if(!isset($_SESSION["username"]))
{
    header("Location:login.php");
}

else
{

$DBHOST = "localhost";
$DBUSER = "root";
$DBPWD = "";
$DBNAME = "customs_auction";

$conn = new mysqli($DBHOST, $DBUSER, $DBPWD, $DBNAME);    
 if($conn->connect_error)
 {
 die("Connection failed!".$conn->connect_error);
 }
 
echo "<img src='auction_logo.png' id='logo'/>";
echo "<a href='logout.php' class='logout button'>Logout </a>";
 
    
$statement = "SELECT * FROM item";
$result = $conn->query($statement);

while($row = $result->fetch_assoc())
{

$iid = $row["item_id"];
$iname= $row["item_name"];
$ipic = $row["item_pic"];
$icurrentp = $row["current_bid"];
$iimg = "item/";
$iimg = $iimg.$row["item_pic"];
 
 
$link = "item_details.php?item_id=";
$item_details = $link.$iid;
echo "<div class='item'>";    
echo "<div class='item_row'>Item Id: $iid</div>";
echo "<div class='item_row'>Item Name: $iname</div>";
echo "<img class='item_img' src='$iimg' alt='image'>";
echo "<div class='item_row'>Current Bid: $$icurrentp</div>";
echo "<div class='item_row' ><a class='link' href='$item_details'>Item Details</a></div>";
echo "</div>";
 
}/*display all the items on screen*/

$conn->close();
}/*prevent direct access by user*/
 
 
?>    
    
    
</body>
</html>