PHP - Code Not Entering If Statement

So after surfing the net I found that the 'best' way to enter ip addresses into a database was by using the INET_ATON function because you can then put it into a unsigned interger column and that will save space. But after looking around I can't find a way of fitting it into php.

This is my attempt:

$ip = getenv("REMOTE_ADDR");

$query = sprintf("UPDATE INTO user (
name, password)
VALUES ('%s','%s','%s')",
mysql_real_escape_string($_SESSION['name']),
mysql_real_escape_string(md5($_SESSION['values']['password']))
INET_ATON('$ip')); //line 37

$result2 = mysql_query($query, $db) or die(mysql_error($db));


I get a parse error:
Parse error: syntax error, unexpected T_STRING in C:\x\xampp\htdocs\pages\login.php on line 37.

This worked until I wanted to add the ip into the database. Any help appreciated.

How would I incorporate a function to simply check the "name" and "message" for a certain amount of chars, like 15 & 150?

Code: [Select]
<form method="post" action="chat.php">
<p><input name="name" type="text" id="name" value="your name" size="10" maxlength="15">
<input name="message" type="text" id="message" value="your message" size="20" maxlength="150">
<input name="submit" type="submit" id="submit"></p>
</form>
</body>
</html>
<?php

// when the submit button is clicked
if(isset($_POST['submit']))
{

// strip any html tags before continuing
$name=strip_tags($_POST['name']);
$message=strip_tags($_POST['message']);

// stop if nothing was entered
if($name!='')
if($message!='')
{

// trim any extra whitespace
$data=trim($name)."\n";
$data.=trim($message)."\n";

//open the text file and enter the data
$file_ar=file("db.txt");
$fp=fopen("db.txt","w");
fputs($fp,$data);
if($file_ar!=NULL)
{
$loop=0;
foreach($file_ar as $line)
{

// do not store more than 20 messages
if($loop>=19*3) break;
fputs($fp,$line);
$loop++;
}
}
fclose($fp);
}
}

// display the messages
$fp=fopen("db.txt","r");
while(!feof($fp))
{
$name=trim(fgets($fp,999));
$message=trim(fgets($fp,999));
if($name!='')
{
echo "<p><b>$name: </b>$message</p>";
}
}
fclose($fp);
?>

I have a text firld to enter amount af a book,But i need to check whether the data entering is numeric only eg:70.98 etc.
how can i achieve this.

my code is
echo"<table><tr><td></td><td>Amount  in USD</td><td></td><td><input type='text' name='amnt' id='amnt'  /> </td><td></td></tr></table>";

 I have written code in php to connect and insert rows into a MSSQL database. i used odbc to connect database.user can enter his details through the form. after submitting the form the details are getting stored into a database. while inserting rows into a database am not trying to insert duplicate values . for this i have given if conditions.these conditions are able to notice the user cname and name exist in the database if the same name exist. but the else part after these conditions are not working i.e rows are not getting inserted. i put everything inside the while loop. how can i correct it? This is my php code.

          $connect = odbc_connect('ServerDB','sa', 'pwd');
          //connects database 
         $query2="select count(*) from company";//this is needer for loop through 
         $result2=odbc_exec($connect,$query2);   
        while(odbc_fetch_row($result2));   
        {     $count=odbc_result($result2,1); 
           echo "</br>","$count";     } 
          $query1="select * from company";     
          $result1 = odbc_exec($connect, $query1);
          # fetch the data from the database         
          while(odbc_fetch_row($result1))
           {          $compar[$count] = odbc_result($result1, 1);     
           $namearray[$count] = odbc_result($result1, 2);
          if($compar[$count]==$_POST['cname'])   
          {          echo "<script> alert(\"cname Exists\") </script>";   
          }         
          else   if($namearray[$count]==$_POST['name'])     
         {        echo "<script> alert(\"Name Exists\") </script>";        }   
         else
         {     
         $query=("INSERT INTO company(cname,name) VALUES ('$_POST[cname]','$_POST[name]') ");   
          $result = odbc_exec($connect, $query);   
          echo "<script> alert(\"Row Inserted\") </script>"; 
         } 
         }

I know this problem comes up a lot but it can be for various reasons so after reading up I can't decide what might be wrong. I'm still learning!
I have a simple php registration form (first name, second name, email address) and every time a user submits an entry a second blank record is created in the MYSQL database after it.

Any help would be great. (php code in red)


Code: [Select]
[color=red]<?
$firstname=$_POST['firstname'];
$surname=$_POST['surname'];
$email=$_POST['email'];

mysql_connect(localhost,$username,$password);
@mysql_select_db($database) or die( "Unable to select database");

$query = "INSERT INTO register VALUES ('','$firstname','$surname','$email')";
mysql_query($query);

mysql_close();
?>[/color]



Here is the section on the html HTML page that submits the form

Code: [Select]
<form action="register.php" method="post" class="BagTitle">
        <table width="700" border="0" cellpadding="0" cellspacing="2">
  <tr>
    <td width="100">First Name: </td>
    <td width="594"><input name="firstname" type="text" size="50" /></td>
      </tr>
  <tr>
    <td>Last Name: </td>
    <td><input name="surname" type="text" size="50" /></td>
      </tr>
  <tr>
    <td>E-mail:</td>
    <td><input name="email" type="text" size="50" /></td>
      </tr>
  <tr>
    <td colspan="2">&nbsp;</td>
      </tr>
  <tr>
    <td colspan="2"><input type="Submit" value="Send" />
        <input name="Reset" type="reset" value="Reset Form" /></td>
      </tr>
    </table>
      </form></p>
Also I have no idea about securing this information. Are there any basic steps I can take?

The dreadful apostrophie problem... This search form returns an error whenever searching with an apostrophie (')

Here's the code on the form (html)

      <td align="center" width="135"><form method="post" action="srch_advert.php"><input type=text name='search' size=15 maxlength=255><br><input type=submit></form></td>
      <td align="center" width="135"><form method="post" action="srch_details.php"><input type=text name='search' size=15 maxlength=255><br><input type=submit></form></td>
      <td align="center" width="135"><form method="post" action="srch_artist.php"><input type=text name='search' size=15 maxlength=255><br><input type=submit></form></td>
      <td align="center" width="135"><form method="post" action="srch_track.php"><input type=text name='search' size=15 maxlength=255><br><input type=submit></form></td>


and heres the code on srch_advert.php


if ($search)   // perform search only if a string was entered.
   {
    mysql_connect($host, $user, $pass) or die ("Problem connecting to Database");

    $srch="%".$search."%";

    $query = "select * from tvads WHERE advert LIKE '$srch' ORDER BY advert, year DESC, details ASC LIMIT 0,30";

 $result = mysql_db_query("cookuk_pn", $query);
    if(mysql_num_rows($result)==0) {
        print "<h2>Your search returned 0 Results</h2>";
   }

    else if  ($result)
    {

Hi, i need to run this past you guy's. I need a way to effectivly check if a user has entered correct "real" details in my registeration form and check if email is already in my database to prevent the user from registering twice?

I need this as some unknown person is using the form and entering there details like this:

Username: 1
Password: 1
email: 1

It's really annoying as they are doing this several times so i have around 13 rows of just "1" in my table now! grr!! 

so far ive got:


Form:
<input name="upassword" type="password" class="style7" id="upassword">
<span class="style7">Email</span>
<span class="style7">:</span>
<input name="email" type="text" class="style7" id="email">
<span class="style7"></span>
<span class="style7"></span>
<input name="Submit" type="submit" class="style7" value="Register" />
</form>


Script:
Code: [Select]
<?php if ($db_found) {

$SQL = "INSERT INTO users (username, upassword, email) 
VALUES ('" .$username. "', '" .$upassword. "', '" .$email. "')";
$result = mysql_query($SQL);




header( 'Location: http://www.removalspace.com/index.php' );  exit();
}
else {
print "Database NOT Found ";
mysql_close($db_handle);
}
?>

But i need it to perform the checks aswell as drop the "real" data in to MySQL? Any ideas please?

I'm having issues with the following:

Code: [Select]
<?php
session_start();
$_SESSION['username']=$_POST['username'];
$_SESSION['password']=$_POST['password'];
if($_SESSION['username']=="username" && $_SESSION['password']=="password"){
if($_GET['product']=="add"){
$content.='
<p><label>Product Name:</label> <input type="text" name="product_name" size="30" />
<label>Product Price:</label> <input type="text" name="product_price" size="5" />
</p>
<p><label>Product Category:</label> <input type="text" name="product_category" size="30" /></p>
<p><label>Product Link:</label> <input type="text" name="product_link" size="30" /></p>
<p><label>Product Image:</label> <input type="text" name="product_image" size="30" /></p>
<p><label>Product Tag:</label> <input type="text" name="product_tag" size="30" /></p>
<p><label>Product Keywords:</label> <input type="text" name="keyword" size="30" /></p>
<p><label>Product Features:</label><br />
<textarea name="product_features" rows="10" cols="60"></textarea>
</p>
<p><label>Product Pros:</label><br />
<textarea name="product_pros" rows="5" cols="30"></textarea>
</p>
<p><label>Product Cons:</label><br />
<textarea name="product_cons" rows="5" cols="30"></textarea>
</p>
<p><label>Product Description:</label><br />
<textarea name="product_description" rows="10" cols="60"></textarea>
</p>
<p><label>Product Notes:</label><br />
<textarea name="product_notes" rows="5" cols="30"></textarea>
</p>
';
$logout='<div><a href="./acp_admincp.php?log-out">Log-Out</a></div>';
}
elseif($_GET['product']=="view"){
}
else{
$content.='
<a href="./admincp.php?product=add">Add New Product</a>
<br />
<a href="./admincp.php?product=view">View Products</a>
';
}
}
elseif(isset($_GET['log-out'])){
session_start();
session_unset();
session_destroy();
header("Location: ./admincp.php");
}
else{
$content='
<form action="./admincp.php" method="post">
<p><label>Username:</label> <input type="text" name="username" size="30" />';
$content.='</p>
<p><label>Password:</label> <input type="password" name="password" /></p>';
$content.='<p><input type="submit" value="Submit" name="Submit" /></p>
</form>';
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
<head>
<base href="http://ghosthuntersportal.com/" />
<title>Ghost Hunter's Portal - Admin Control Panel</title>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<meta name="verify-v1" content="" />
<meta name="keywords" content="ghost, hunters, hunter, ghosts, spirit, spirits, paranormal, investigation, investigator, investigators, k2, emf, meter, kii" />
<meta name="description" content="Ghost Hunters Potal. Parnormal research equipment store." />
<meta name="author" content="Andrew McCarrick" />
<meta name="robots" content="index, follow"
<link rel="stylesheet" type="text/css" href="style.css" />
</head>
<body>
<img src="./logo.png" alt="Ghost Hunter's Portal Admin Control Panel" />
<br />
<div style="color: #AA44AA; font-size: 26px; margin-top: -30px; margin-left: 125px;">Admin Control Panel</div>
<?php
echo $logout;
echo $content;
?>
</body>
</html>

I can log-in, and get to the page with the two links on it. However, once I click one of the links it falls back to the log-in page, and it ends up being a never ending loop.

It's doing this:
Log-In --> Page with links ---> Log-In page again

Should be doing this:
Log-In --> Page with links --> Add Product page or View Products page

I can never get into the the actual sub page.

Just to be clear, the address bar actually shows product=add or product=view, but it still shows the log-in page.

Hello Everyone,
I have to change the if statements to a switch statement, in this game. Can anyone help? Thanks.

var checkKeyPressed = function (e) {
// Press key A or key D to make dog run to the left or right
// The running speed is specified by the step variable, 10 by default.
// If you replace 10 with a larger integer, the dog will run faster.

    //press A, dog runs left
    if (e.keyCode == "65") {
        if (prex[0] > 5) {
            prex[0] = prex[0] - step;
        }
    }
    //press D, dog runs right
    if (e.keyCode == "68") {
        if (prex[0] < right) {
            prex[0] = prex[0] + step;
        }
    }
};

Good morning,   I am trying to return specific values depending on the value of the WJCStatusID, for example if WJCStatusID = < 4 but > 2 return "In production"   SQL QUERY:   

SELECT tblWJCItem.AddedDescription, 
    tblWJC.WJCPrefix + Convert(Varchar(10),tblWJC.WJCNo) AS OurRef, 
    tblWJCItem.MaterialName, tblStockFamily.StockFamily, 
    tblWJCItem.WeightToSend, 
    tblWJC.DateCreated,
    tblWJC.WJCStatusID
FROM tblWJC 
 INNER JOIN tblWJCItem ON tblWJC.WJCID = tblWJCItem.WJCID 
 INNER JOIN tblStockFamily ON tblWJCItem.ProductFamilyID = tblStockFamily.StockFamilyID
 

IF (tblWJC.WJCStatusID) < 2 THEN  'Pre Production'
   ELSE IF (tblWJC.WJCStatusID) < 4 THEN 'In Production'
   ELSE IF (tblWJC.WJCStatusID) > 4 THEN 'Ready To Ship'
    ELSE 'Awaiting Lab Results';

I am quite new to the world of mssql so I maybe doing something wrong which is quite simply to fix. Can any body help?

I've never really had this problem before. I'm trying to make it so only moderators can edit titles.

This is currently my if statement:

elseif($type == 2 && acc_status(getUsername()) > 1 && !isset($_POST['title']) || !isset($_POST['content']))

(I can assure you getUsername() works)

Interpretation: If the editing type is 2 (thread/topic) and the user's account status is higher than 2 (meaning admin & mod) and the title or message/content isn't set, display the content within the if statement block. Why is it users with a user status of 1 can see the information within the block statement, allowing them to see the "edit title" field?

Hi all,

I have the below which triggers an alert box when the user is redirected to the index page.
<?php
if(!empty($_SESSION['reg']))
{
echo '<div id="alert">' . $_SESSION['reg'] . '</div>';
unset($_SESSION['reg']);

}
if(!empty($_SESSION['fail']))
{
echo '<div id="alertr">' . $_SESSION['fail'] . '</div>';
unset($_SESSION['fail']);

}
if(!empty($_SESSION['logged']))
{
echo '<div id="alertr">' . $_SESSION['logged'] . '</div>';
unset($_SESSION['logged']);

}
if(!empty($_SESSION['failedlog']))
{
echo '<div id="alertr">' . $_SESSION['failedlog'] . '</div>';
unset($_SESSION['failedlog']);

}?>


It only works when session ['reg'] contains a value. I guess I can not use if statements in this way but not quite sure what I should be using?
Many Thanks

Hello all,

I need your help. I have two pages. This is the 1st page:


<?php
include "include/dbc.php";

include "include/header.inc";
?>

<style type="text/css">
.mydate{
color:#00F;
text-decoration:underline;
cursor:pointer;
}
</style>

<script type="text/javascript">
function displayDate(d){
var date=new Date();
var D=date.getDate();
date.setDate(D+d);
var YYYY=date.getFullYear();
var MM=date.getMonth()+1;
MM<10?MM='0'+MM:null;
var DD=date.getDate();
DD<10?DD='0'+DD:null;
var span=document.getElementById('date');
span.innerHTML= 'Entries for '+MM+'/'+DD+'/'+YYYY;
}
onload=function(){displayDate(0)};
</script>

<h1>Food Diary</h1>

<div class="full">
<center><div><span class="mydate" onclick="displayDate(-1)"><img src="images/left_arrow.png" border="0">Yesterday</span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span id="date" style="font-size:2em;"></span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<span class="mydate" onclick="displayDate(1)">Tomorrow<img src="images/right_arrow.png" border="0"></span></div><br />
<a href="#" onclick="displayDate(0);return false;">Today</a>
</center>

<div class="full">
<form name="exercise" id="exercise" method="GET" action="">
  <center><table>
<tr>
     <td><h3>Add an Activity</h3></td>
</tr>
<tr>
     <td><input name="NewSearchString" style="width: 100px" type="text"/>&nbsp;&nbsp;<input type="submit" value="Search" /> </td>
</tr>
    <tr>
     <td>
         <select name="activity">
             <option value="_">Activity Browse...</option>
                <option value="all">All Activities</option>
                <option value="biking">Biking</option>
                <option value="condition">Conditioning</option>
                <option value="dancing">Dancing</option>
                <option value="fish">Fishing & Hunting</option>
                <option value="Home">Home Activities</option>
                <option value="misc">Miscellaneous</option>
                <option value="music">Music Playing</option>
                <option value="occupation">Occupation</option>
                <option value="running">Running</option>
                <option value="sports">Sports</option>
                <option value="walking">Walking</option>
                <option value="water">Water Activities</option>
                <option value="winter">Winter Activities</option>
</select> &nbsp;&nbsp;<input type="submit" value="Submit" /></td></tr></table></center></form>
</td>
</tr>
</table> </center>
<table width="100%">
    <tr bgcolor="#66CC33">
     <td><div>Activity</div></td>
        <td><div>Specific Activity</div></td>
        <td><div>Time (hh:mm)</div></td>
        <td><div>Distance</div></td>
        <td><div>Units</div></td>
</tr>
    <tr bgcolor="#66CC33">
     <td><div></div></td>
      <td><div></div></td>
       <td><div></div></td>
        <td><div class="Float"></div></td>
        <td class="cp_Distance"><div></div></td>
</tr>
<?php
if(isset($_GET[activity])) {
$category=$_GET[activity];
$result = mysql_query("SELECT * FROM exercise WHERE type='$category'");
?>
<form action="add_activity.php" method="POST">
<?php
while($row = mysql_fetch_array($result)) {
echo '<tr><td><div>'.$row[Type].'</div></td>';
echo '<td><div>'.$row[Name].'<input type="hidden" name="exerciseid[]" value="'.$row[Name].'"></div></td>';
echo '<td><div><input type="text" name="duration['.$row['Name'].']" value=""></div></td>';
echo '<td><div><input type="text" name="distance['.$row['Name'].']" value ""></div></td>';
echo '<td><div><select name="metric[]">
         <option value="mile" name="mile">mile</option>
             <option value="Km" name="Km">km</option>
             <option value="M" name="M">m</option>
             <option value="Yard" name="yard">yrd</option>
             <option value="Feet" name="feet">ft</option>
            </select></div></td></tr>';

}
mysql_close();
?>

<tr><td colspan="6" align="center"><input type="submit" name="submit" value="Add Activities" onClick="return confirm(
  'Are you sure you want to submit the activities?');"></td></tr>
</form>
<?php
}
?>
    <tr bgcolor="#66CC33">
     <td><div></div></td>
      <td><div></div></td>
       <td><div></div></td>
        <td><div class="Float"></div></td>
        <td class="cp_Distance"><div></div></td>
</tr></table>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;


This page contains a table that is pulling info from a database stored in phpmyadmin. The values entered in that table are passed to the second page:


<?php
include "include/dbc.php";

include "include/header.inc";

$exerciseid = $_POST["exerciseid"];
$duration = $_POST["duration"];
$distance = $_POST["distance"];
$metric = $_POST["metric"];

echo'<h1>Added Activities</h1>';



// name of array
echo '<h1>Exercise</h1>';
if (is_array($exerciseid)) {
        foreach ($exerciseid as $key => $value) {
                        echo $key .' : '. $value .'<br />';
        }
}


echo '<h1>Duration</h1>';
if ($duration == ""){
echo "No value";

}

// name of array
echo '<h1>Distance</h1>';
if (is_array($distance)) {
        foreach ($distance as $key => $value) {

                        echo $key .' : '. $value .'<br />';

        }
}

// name of array
echo '<h1>Metric</h1>';
if (is_array($metric)) {
        foreach ($metric as $key => $value) {

                        echo $key .' : '. $value .'<br />';

        }
}

?>


The problem is that ALL the values, empty or w/content, are being passed. So I was wondering if there was a way to pass only user input with an if/else statement. Something like:


if ($duration == ""){
echo "No value";
else
  echo duration;
}


This, however, is not working and I would like to know what possibly could work that would be structured similarly. Thanks in advance.

Hi Guys

I've absolutely no knowledge of OOP and I've inherited a huge site built with OOP.  I can convert some of it, to variables I understand and can use, and have a vague understanding of the predefined functions.  However I an struggling to put a simple if/or statement together.

if(user_has_role_assignment($USER->id,1)){

works fine, but when I try to do it as an if / or it fails.

if(user_has_role_assignment($USER->id,1)) || ($USER->id,36))  {

Any ideas?

Sorry, I don't have any errors as another part of the site turns off the error reporting and I can't for the life of me turn it back on with error_reporting(E_ALL) in the page;