PHP - Prevent User From Voting Twice With Cookie

I'm an experienced programmer with several languages (COBOL, REXX, Java, Javascript, etc.) under my belt over many years but I know very little about PHP. I dabbled in it a bit a year or two back and got it to do what I wanted to do but I'm not sure how to do what I currently need.   A bit of context: I have designed a website where the user can choose between various page styles; each style invokes different CSS to give them a different visual experience of the site. They can select the style they want via View/Style in Internet Exploder and View/Page Style in Firefox  but that preference is only remembered as long as they're on that page. As soon as they move to another page on the site, they have to choose the alternate style again or live with the default style. I want them to be able to select that preference ONCE, the store it in a cookie specifically for them, then keep using that style every time they visit the site. (Naturally, I want them to be able to change the style and then remember the new style as well.) There will be many visitors and each will want that same capability. I currently don't require any login to the site. (I'm toying with password-protecting some of the site down the road but that's not a factor in this page style thing that I'm talking about here.   Now, my questions.   I've found a variety of short articles describing how to use setCookie() to create the cookie (and delete it later) and getCookie() or the newer echo $_COOKIE["name"] to determine the cookie value. However, I am NOT seeing anything that says where I put the code to set and/or read the code within my web pages. I would really appreciate an explanation of that! I expect to write short fragments of php code to do those jobs which I will then imbed within my web pages via SSI (Server Side Includes). Is that reasonable or is there a better way?   Also: 1. When the user clicks on the desired Style in the View/Style menu, how do I detect what choice they made? 2. Should the name of the cookie be something like "pageStyle" or should it be something that uniquely identifies the user so that the right cookie is retrieved when the come back? If the latter, what value should I use and how should I obtain it? I assume that something unique about the user obtained from their headers is far better than displaying a dialog and asking them for some unique identifier.   I'd rather stay away from Javascript in any of this functionality since I can't rely on it being turned on.   One quick aside while I'm here. Does  anyone know how to change the page style if visitors use Google Chrome or Opera? I can't even FIND options for changing the page style in my copies of those two browsers and both are current versions. Do they not support differing page styles at all or do they just hide the technique to choose the style very effectively?   -- Henry

I am trying to create a remember me checkbox for the login of my CMS.

What I am trying to achieve is that whenever a user logs in with the checkbox ticked and auth code is created and stored in a cookie and also the database under their user info row. When I user closes their browser without logging out and then returns to the CMS a few days later etc I am trying to run some code straight away if they get redirected to the login page. The code will check to see if the auth code cookie exists, if it does it gets checked against the database records, if a match is found then log that user in. If it doesn't do nothing until the user uses the login form.

I have written what I though was the perfect solution but it never seems to automatically log the user in, even if they haven't logged out. Some direction in this matter would be very helpful, thank you.

I would also like to know if there is a way of using php to stop my session getting cleared by the trash collector after some inactivity?



Login.php   (I am using PHpass for the password hashing)

Code: [Select]
<?php include ('functions.php'); ?>
<?php get_header('login'); ?>
    <div id="login-result">
    <?php
$redirect = htmlspecialchars(mysql_real_escape_string(addslashes($_GET['redirect'])));

if(isset($_COOKIE['authcode'])){

connect();

$authcookie  = htmlspecialchars(mysql_real_escape_string(addslashes($_COOKIE['authcode'])));

$sql         = "SELECT uid, username, firstname, lastname, role FROM usersT WHERE authcode='$authcode'";
$result      = mysql_query($sql);
$count       = mysql_num_rows($result);
$row         = mysql_fetch_array($result);

$uid         = $row['uid'];
$username    = $row['username'];
$fname       = $row['firstname'];
$lname       = $row['lastname'];
$role        = $row['role'];

   
if($count==1){
$sql2    = "UPDATE usersT SET status = '1' WHERE uid = '$uid'";
$result2 = mysql_query($sql2);

if($result2){

session_register("uid");
session_register("uname");
session_register("ulevel");
$_SESSION["uid"]       = $uid;
$_SESSION["username"]  = $username;
$_SESSION["uname"]     = $fname;
$_SESSION["ufullname"] = $fname . " " .$lname;
$_SESSION["urole"]     = $role;

if(!empty($redirect)) {
header( 'Location: '. $redirect ) ;
exit(); 
}
else {
header( 'Location: index.php' ) ;
exit();
}

}

}

}
?>
    <?php
if (isset($_POST['admin_login'])){

if(isset($_POST["username"]) && isset($_POST["password"])){

connect();

$username_p        = htmlspecialchars(mysql_real_escape_string(addslashes($_POST["username"])));
$password_p        = htmlspecialchars(mysql_real_escape_string(addslashes($_POST["password"])));

if (strlen($password_1) < 73) {

//Password hashing

$sql3          = "SELECT password FROM usersT WHERE username='$username_p'";
$result3       = mysql_query($sql3);
$row3          = mysql_fetch_array($result3);

require("inc/password-hash.php");
$hasher        = new PasswordHash(8, false);
$stored_hash   = "*";
$stored_hash   = $row3['password'];
$check         = $hasher->CheckPassword($password_p, $stored_hash);

if($check){

$sql4      = "SELECT uid, username, firstname, lastname, role FROM usersT WHERE username='$username_p'";
$result4   = mysql_query($sql4);
$row4      = mysql_fetch_array($result4);

$uid       = $row4['uid'];
$username  = $row4['username'];
$fname     = $row4['firstname'];
$lname     = $row4['lastname'];
$role      = $row4['role'];

$authcode  = random(30);
$sql5      = "UPDATE usersT SET status = '1', authcode = '$authcode' WHERE uid = '$uid'";
$result5   = mysql_query($sql5);

if($result5){

session_register("uid");
session_register("uname");
session_register("ulevel");
$_SESSION["uid"]        = $uid;
$_SESSION["username"]   = $username;
$_SESSION["uname"]      = $fname;
$_SESSION["ufullname"]  = $fname . " " .$lname;
$_SESSION["urole"]      = $role;

if(isset($_POST['remember'])) { 
setcookie("authcode", $authcode, time() + 86400 * 365 * 2); 
} // Check if the user wants to be remembered.

if(!empty($redirect)) {
header( 'Location: '. $redirect ) ;
exit(); 
} // Check if the user has been redirected from another page.
else {
header( 'Location: index.php' ) ;
exit();
}

} // Check if the users status has been updated.
else {
echo "<div class=\"error rounded5 shadow\">User status couldn't be updated!</div>";
}

} // Check the entered password against the stored hash.
else {
echo "<div class=\"error rounded5 shadow\">Invalid username or password!</div>";
}

} // Checked the character length of the password.
else {
echo "<div class=\"error rounded5 shadow\">Password must be 72 characters or less!</div>";
}

} // Check both fields have been filled in.

} // Check the user has submitted the data.

?>
    </div><!-- / login-results -->
    <div id="login" class="rounded5 shadow">
<form name="loginform" id="loginform" action="<?php $_SERVER['PHP_SELF']; ?>" method="post">
            <p>
                <label for="username">Username<br>
                <input type="text" name="username" id="username" class="rounded5" value="<?php echo $username_p; ?>" size="20" tabindex="10" /></label>
            </p>
            <p>
                <label for="password">Password<br>
                <input type="password" name="password" id="password" class="rounded5" value="<?php echo $password_p; ?>" size="20" tabindex="20" maxlength="72" /></label>
            </p>
            <p class="submit">
            Keep me logged in <input type="checkbox" name="remember" id="remember" <?php if(isset($_COOKIE['remembered'])){ echo "selected=\"selected\""; } ?>  /><br /><br /><a href="" class="left">Lost your password?</a>
                <input type="submit" name="admin_login" id="admin_login" class="btn rounded10 right" value="Log In" tabindex="100" />
            </p>
            <div class="cleaner"></div><!-- / cleaner -->
        </form>
    </div><!-- / login-->
<?php get_footer('login'); ?>




Logout.php

Code: [Select]
<?php
session_start();
include ('functions.php');
connect();
$uid    = mysql_real_escape_string($_SESSION['uid']);
$sql    = "UPDATE usersT SET status = '0', authcode = '' WHERE uid = '$uid'";
$result = mysql_query($sql);

if($result) {
session_unset(); 
session_destroy(); 
setcookie("authcode", $authcode, time() - 86400 * 365 * 2); 
header("location:" . get_option('home') . "/login.php");
exit();
}
else {
exit();
}
?>


Redirect Code

Code: [Select]
<?php 
session_start();
$url   = (!empty($_SERVER['HTTPS'])) ? "https://".$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'] : "http://".$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
$uid   = $_SESSION['uid'];
if (!isset($uid)) {
header('location:login.php?redirect='.$url);
exit();
die();
}
?>

This topic has been moved to Linux.

http://www.phpfreaks.com/forums/index.php?topic=318175.0

Hello, 

I was wondering is it possible to create vote with php when people vote the voted thing will go away like for exsample if there is ingame map vote and players vote !map de_dust2 the de_dust2 will be removed from map list and the last map that stays will be used?   

Sorry for bad english.

<form action='index.php'  method='POST'  enctype='multipart/form-dat'>

<select name='votes'>
  <option>SEATOWN</option>
 <option>vote1</option>
 <option>vote2</option>
 <option>vote3</option>
</select>
<input type='submit' name='vote' value='Vote'>
</form>
<?php

$vote=$_GET['votes'];
if(isset($_POST['vote']))
{
echo "voted";
echo $vote;
}


?>

why would this not echo out anything for $vote???


cheers matt