PHP - Php And Mysql Get A Column And Make A Password

I need to find a way to store a password for connection to a remote database. I'm writing a program that will create a database on whatever server the user is using. Obviously, they will have to provide their username and password in order to create the database and have access to it. I need my program to get the information once (when they use the setup utility), then be able to store it so they can automatically connect to the database whenever my program is used. I plan using a php file for storage and include() to gain access to the info. I just don't have an idea for getting the information into the php file in the first place.

Thanks for any ideas!

Hi Guys,    I have a very simple table called: registered_users   there is only 4 columns    column 1 = id column 2 = username column 3 = password column 4 = salt    the password is hashed and salted when it's added to the table.    The problem is, that my username and password isn't being "seen" by the code so it's not sending me to the next page, it is only sending me back to the login page - not validated.    Please could you help me understand what i may be doing wrong here, it all looks okay to me but that's not obviously the case?    Here is the validation for username and password to login: 

/* validate the username and the password */
if((!isset($_POST['username'])) || (strlen(trim($_POST['username'])) <5) || (trim($_POST['username']) != preg_replace("/[^a-zA-Z0-9\_]/", "", trim($_POST['username'])))) {	
	/* if  is bad */
	$my_error = 1;
}else{
	$username = mysql_real_escape_string(trim($_POST['username']));
}
/* END validating username */

/* validate the password */
if((!isset($_POST['password'])) || (strlen(trim($_POST['password'])) <5) || (trim($_POST['password']) != preg_replace("/[^a-zA-Z0-9\_]/", "", trim($_POST['password'])))){
	/* if  is bad */
	$my_error = 1;
}else{
	$password = trim($_POST['password']);
}
/* END validating password */

/* if any of the post variables are invalid send back to the form page */
if($my_error != 0) {	
	$_SESSION['error_message'] =$error_message;	
	header("Location: index.php");
	exit();
}


/* FUNCTION TO CREATE SALT */
function createSalt(){
	$string = md5(uniqid(rand(), true));
	return substr($string, 0, 3);
}

/* check to see if username is in the table if not send back to login */
$query01 = "SELECT * FROM registered_users WHERE username = '$username'";
$result01 = mysql_query($query01)  or die(mysql_error());

if(mysql_num_rows($result01) != 1) {	
	header("Location: index.php");	
	exit();
 }


$row = mysql_fetch_array($result01);
$salt = $row['salt'];
$hash = hash('sha256', $salt, $password);
$query02 = "SELECT id FROM registered_users WHERE username = '$username' AND password = '$hash'";
$result02 = mysql_query($query02)  or die(mysql_error());
if(mysql_num_rows($result02) !=1){ 
	header("Location: index.php");	
	exit();
}
$_SESSION['id'] = $row['id'];
$_SESSION['valid_user'] = "yes";
header("Location: admin02.php");	
exit();
?>

Thanks Andy
Edited by Ch0cu3r, 05 July 2014 - 09:14 AM.

Hey all. I am new to this forum and to PHP as a whole. I though I would try to make a login system using php and mysql. The login and register forms work great but I cannot seem to fully figure out how to let a user change their password. My code partially works. When the user types the correct old password and when the two new password forms confirm, the password changes and the database is updated and the user is taken to a page that tells him that his password was successfully changed. However, the problem is when the old password he types is different than the one in the database, the page that states password successfully changed also appears but the password is not changed in the database. The problem is thus with the SELECT statement. Can anyone please help me find whats wrong. It has been tormenting for a few hours now. Thank you in advance. . I used md5 encryption for the passwords. Here is the section of code that comes after the script makes sure that none of the forms are empty and that the passwords confirm  .

//Create SELECT query to verify that the old password is correct
$qry="SELECT * FROM members WHERE login='" . $_SESSION['SESS_USERNAME'] . "' AND passwd='".md5($_POST['opassword'])."'";
   $result = mysql_query($qry);
   if($result)
   {
   //Create UPDATE query to replace old password with new password
   $updatepasswd="Update members set passwd='".md5($_POST['npassword'])."' where login='" . $_SESSION['SESS_USERNAME'] . "' AND passwd='".md5($_POST['opassword'])."'";
   $update = mysql_query($updatepasswd);
   
   //Check whether the query was successful or not
   if($update) {
   
      header("location: changepasswordsuccess.php");
      exit();
      }
   else {
      die("Query failed");
   }
   }
   else
   {
   header("location: passwordchange-failed.php");
   }

Hi there   I am just finalising my first ever PHP/MYSQL project and I am worried about where to safely keep my connection credentials for the SQL DB.   Currently, I am storing them in ../php/config.php and this works fine, but I am worried as to the security of this   Can anyone advise please   Thanks

I am attempting to install PEAR however am very confused and I believe I have stuffed up something from which it will be very complicated to come back from.

Firstly, for some reason I have the C:\wamp\bin\php\php5.3.0\go-pear.bat installation file, but I also have the C:\PHP\go-pear.bat installation file. Which one do I choose? And is the C:\PHP direcotry left over from an old installation. I have no idea.

Further to that, I ran the go-pear.bat installation from the C:\PHP directory, I have a feeling this was the wrong decision. After installing everything it stated that it had updated my php.ini file, however this file was in the wrong directory and so I took the updated lines from the php.ini which put in a a new include_path and pasted them into the php.ini file in the C:\wamp... directory.

Now when I go to the command prompt and type in pear here is the message I get:

PHP_PEAR_PHP_BIN is not set correctly.
Please fix it using your environment variable or modify the default value in pear.bat
The current value is:
.\php.exe

I have followed a remedy to this which is included he http://www.pear-forum.org/topic2413.html

However still to no avail. I am further confused why I have a C:\PHP folder and why it is seperate from my WAMP folder.

Further to that, when I try to install PEAR from my WAMP folder and click on C:\wamp\bin\php\php5.3.0\go-pear.bat I get the following error message:

phar "C:\wamp\bin\php\php5.3.0\PEAR\go-pear.phar" does not have a signaturePHP warning require_once(phar://go-pear.phar/index.php>: failed to open stream: phar error: invalid url or non-existent phar "phar://go-pear.phar/index.php" in C:\wamp\bin\php\php5.3.0\PEAR\go-pear.phar n line 1236

(and another message that looks very similar)

-----
Note: the installation instructions I am following are located here > http://trac.symfony-project.org/wiki/HowToInstallPearOnWindowsWithWamp
------


So basically I am stuck. Why is it so difficult to install PEAR and how do I simply get it working?

Is there a way to use php to make an automatic column addition to a table?  like if I had a comment form and want to save the replys in a database, I would want a column for each reply, is there a way to make a new column each time someone submits the form?

I have a mysql table named songs with 3 columns, id, artist,title.

Most of the songs in the artist column are correct, ex:

artist
------------------
John Denver
Loretta Lynn
Shania Twain
Luke Bryan

But some of the songs in the artist column are reveresed with a comma, ex:

artist
-----------------
Dever, John
Lynn. Loretta
Twain, Shania
Bryan, Luke

Is there an easy php code snippet or mysql statement that i can use to reverse the order of first name and last name and remove the comma in the last example so the artst columd matches the first example?

I hope this makes sense, thanks, Dale.

Php Buddies,

Just how do you insert an uploaded img via html for ($_POST) to mysql tbl and what type of column should it be ?

Also, how to link the img from the mysql column to a webpage ?

Following html links the img from a folder/directory to a webpage:

<a href="../html-link.htm"><img src="flower.jpg" style="width:82px; height:86px" title="White flower" alt="Flower"></a>

hi,

i'm new in php/mysql. i'm stored student marks values in following format in mysql db table.


id student_code Tamil English Maths Science Social
1                1        100      75       78      88       95
2                2         85      90        88     80      100

But i want to search and display the specific student marks in following format.

id:1

student_code:1

Tamil:100

English:75

Maths:78

Science:88

Social:92

Total:?

Avg:?

please give correct code for this format.

Hi everyone,

I got a bit of code off the web and did some tweaking. I want to use it to export data from a mysql table to excel. I do a website for a friend and have been exporting it myself and emailing it to him. However, I thought it'd be easier if I could just direct him to a link so he could get it whenever.

Anyway, the code below works pretty well...the only problem being that it exports all data to the first column of the excel file. There are commas between all fields, so it is possible to use the 'text to columns' feature in excel to separate teh data into separate columns.

However, if there is a way of fixing the code that would negate the need to have to do this, it would be much appreciated.

Here goes:





<?php

$db = mysql_connect("localhost", "MYUSERNAME", "MYPASSWORD");
mysql_select_db("MYDATABASE",$db);

$query="SELECT * FROM MYTABLENAME";
$result=mysql_query($query);
$num=mysql_numrows($result);
mysql_close();

$csv_output = "firstname,lastname,emailaddress,crew_name_001"; 
$csv_output .= "\r\n"; 

$i=0;
while ($i < $num) {
$id=mysql_result($result,$i,"id");

$firstname = mysql_result($result,$i,"firstname");
$lastname = mysql_result($result,$i,"lastname");
$emailaddress = mysql_result($result,$i,"emailaddress");
$crew_name_001 = mysql_result($result,$i,"crew_name_001");

$csv_output .= "$firstname,$lastname,$emailaddress,$crew_name_001\n";
++$i;
}

$mode="xls";
$type="excel";


header("Content-type: text/x-csv");  

header("Content-disposition: attachment; filename=".date("d-m-Y")."-export.xls");  

print $csv_output;
exit;

?>



Thanks for your time,

Dave

I have a table of restaurant menu items called menu_items.  This table has a float row(3,2) called price.  I have a query that looks like this:

$query = mysql_query("SELECT * FROM menu_items WHERE restaurant = '".$restaurantid."'");

How would I find the average of the price row from that query?  Basically I want to find the average item price for a restaurants menu.

Hello,

I'm having some issues with PHP thinking that the variables that I send it are the actual columns in my database.  First, I pull off Quadratic_Functions and introductory_problem from http://localhost:8888/algebra_book/Chapters/Quadratic_Functions/introductory_problem.php using the code below:

Code: [Select]
$chapter_page =  $_SERVER['PHP_SELF'];
$chapter_page_array = explode('/',$chapter_page);
$size =count($chapter_page_array);
$chapter = $chapter_page_array[$size-2];
$page = $chapter_page_array[$size-1];
$page_array = explode('.', $page);
$page = $page_array[0];
Based on my printing of the variables $chapter and $page I think that it's doing what I want it to do.  I then use the following function:

Code: [Select]
$supplemental_id = getSupplementalId($dbRead,$chapter,$page);
to check out if the there's a supplemental_id for the Quadratic_Function chapter and introductory_problem page name via:

Code: [Select]
function getSupplementalId($read,$user_id,$chapter,$page)
  {
  $sql = "SELECT supplemental_id
  FROM instructors_supplemental
WHERE page_name = $page
AND chapter_name='$chapter";

return $read->fetchRow($sql);
  }
If I stick in actual values, as seen below, the thing runs fine.

Code: [Select]
$sql = "SELECT supplemental_id
  FROM instructors_supplemental
WHERE page_name = 'introductory_problem'
AND chapter_name='Quadratic_Functions'";

But if I run it in the abstract version, with variables for page and chapter name (the first version), I get Fatal error: Uncaught exception 'PDOException' with message 'SQLSTATE[42S22]: Column not found: 1054 Unknown column 'introductory_problem' in 'where clause'' in...

It's almost as if it thinks that my variables are the names of the columns. 

Any thoughts would be appreciated....

I have a tag column in the table of posts. I store tags as "tag1,tag2,tag3,...". When displaying tags in the post, I explode to have an array. Everything is OK, but I cannot create a tags cloud; as I need to have the occurrence of each tag to increase the font. What is a practical trick to create tag clouds?

I think the common method is to build a table for post tags and store each single tag in a separate cell. But I hope to keep my database tidy.

I have a database with one row and about 50 columns, where the inserted data is being displayed on a page. But a lot of the time not all columns are being used. So say only 25 columns have data, there will be 25 blanks spaces with an &#8226; symbol.

Is there a way to ignore to columns that have no data in them? Such as SELECT * from notices WHERE [columns have data]



Code: [Select]
<?php
$html="<table>";
$q="select * from notices";
$r=mysql_query($q);
while($o=mysql_fetch_object($r)){
foreach($o as $key=>$val){
$html.="<tr><td colspan='2' bgcolor='#896B45'><div style='padding:10px;'>&#38;#8226;&nbsp;{$val}<br></div></td></tr>";
}}
$html.="</table>";
echo $html;
?>



CREATE TABLE `notices` (
  `id` int(11) NOT NULL auto_increment,
  `notice1` text,
  `notice2` text,
  `notice3` text,
  `notice4` text,
  `notice5` text,
  `notice6` text,
  `notice7` text,
  `notice8` text,
  `notice9` text,
  `notice10` text,
  `notice11` text,
  `notice12` text,
  `notice13` text,
  `notice14` text,
  `notice15` text,
  `notice16` text,
  `notice17` text,
  `notice18` text,
  `notice19` text,
  `notice20` text,
  `notice21` text,
  `notice22` text,
  `notice23` text,
  `notice24` text,
  `notice25` text,
  `notice26` text,
  `notice27` text,
  `notice28` text,
  `notice29` text,
  `notice30` text,
  `notice31` text,
  `notice32` text,
  `notice33` text,
  `notice34` text,
  `notice35` text,
  `notice36` text,
  `notice37` text,
  `notice38` text,
  `notice39` text,
  `notice40` text,
  `notice41` text,
  `notice42` text,
  `notice43` text,
  `notice44` text,
  `notice45` text,
  `notice46` text,
  `notice47` text,
  `notice48` text,
  `notice49` text,
  `notice50` text,
  PRIMARY KEY  (`id`)
) ENGINE=MyISAM AUTO_INCREMENT=40 DEFAULT CHARSET=utf8

I have an admin page for the posting of the date to the database:
Code: [Select]
<?php 
include_once($_SERVER["DOCUMENT_ROOT"] . "/main.inc.php");
$page_content = db_select("select * from notices");
$pc = $page_content[0];
$ff=$_POST;
if ($ff['submit']) {
$insc="UPDATE notices SET notice1='".$ff['notice1']."' , notice2='".$ff['notice2']."' , notice3='".$ff['notice3']."' , notice4='".$ff['notice4']."' , notice5='".$ff['notice5']."' , notice6='".$ff['notice6']."' , notice7='".$ff['notice7']."' , notice8='".$ff['notice8']."' , notice9='".$ff['notice9']."' , notice10='".$ff['notice10']."' , notice11='".$ff['notice11']."' , notice12='".$ff['notice12']."' , notice13='".$ff['notice13']."' , notice14='".$ff['notice14']."' , notice15='".$ff['notice15']."' , notice16='".$ff['notice16']."' , notice17='".$ff['notice17']."' , notice18='".$ff['notice18']."' , notice19='".$ff['notice19']."' , notice20='".$ff['notice20']."' , notice21='".$ff['notice21']."' , notice22='".$ff['notice22']."' , notice23='".$ff['notice23']."' , notice24='".$ff['notice24']."' , notice25='".$ff['notice25']."' , notice26='".$ff['notice26']."' , notice27='".$ff['notice27']."' , notice28='".$ff['notice28']."' , notice29='".$ff['notice29']."' , notice30='".$ff['notice30']."' , notice31='".$ff['notice31']."' , notice32='".$ff['notice32']."' , notice33='".$ff['notice33']."' , notice34='".$ff['notice34']."' , notice35='".$ff['notice35']."' , notice36='".$ff['notice36']."' , notice37='".$ff['notice37']."' , notice38='".$ff['notice38']."' , notice39='".$ff['notice39']."' , notice40='".$ff['notice40']."' , notice41='".$ff['notice41']."' , notice42='".$ff['notice42']."' , notice43='".$ff['notice43']."' , notice44='".$ff['notice44']."' , notice45='".$ff['notice45']."' , notice46='".$ff['notice46']."' , notice47='".$ff['notice47']."' , notice48='".$ff['notice48']."' , notice49='".$ff['notice49']."' , notice50='".$ff['notice50']."' , id='1' WHERE id='1'";

mysql_query($insc);

}
?>
<html>
<head>
</head>
<body>
 <form name="noticesform" method="post" action="notices_admin.php" enctype="multipart/form-data">
                                   
                                      <textarea name='notice1' cols='110' rows='3' class='input'><?=$pc["notice1"]?>
</textarea>
                                      <textarea name='notice2' cols='110' rows='3' class='input'><?=$pc["notice2"]?>
</textarea>
                                      <textarea name='notice3' cols='110' rows='3' class='input'><?=$pc["notice3"]?>
</textarea>
                                      <textarea name='notice4' cols='110' rows='3' class='input'><?=$pc["notice4"]?>
</textarea>
                                      <textarea name='notice5' cols='110' rows='3' class='input'><?=$pc["notice5"]?>
</textarea>
                                      <textarea name='notice6' cols='110' rows='3' class='input'><?=$pc["notice6"]?>
</textarea>
                                      <textarea name='notice7' cols='110' rows='3' class='input'><?=$pc["notice7"]?>
</textarea>
                                      <textarea name='notice8' cols='110' rows='3' class='input'><?=$pc["notice8"]?>
</textarea>
                                      <textarea name='notice9' cols='110' rows='3' class='input'><?=$pc["notice9"]?>
</textarea>
                                      <textarea name='notice10' cols='110' rows='3' class='input'><?=$pc["notice10"]?>
</textarea>
                                      <textarea name='notice11' cols='110' rows='3' class='input'><?=$pc["notice11"]?>
</textarea>
                                      <textarea name='notice12' cols='110' rows='3' class='input'><?=$pc["notice12"]?>
</textarea>
                                      <textarea name='notice13' cols='110' rows='3' class='input'><?=$pc["notice13"]?>
</textarea>
                                      <textarea name='notice14' cols='110' rows='3' class='input'><?=$pc["notice14"]?>
</textarea>
                                      <textarea name='notice15' cols='110' rows='3' class='input'><?=$pc["notice15"]?>
</textarea>
                                      <textarea name='notice16' cols='110' rows='3' class='input'><?=$pc["notice16"]?>
</textarea>
                                      <textarea name='notice17' cols='110' rows='3' class='input'><?=$pc["notice17"]?>
</textarea>
                                      <textarea name='notice18' cols='110' rows='3' class='input'><?=$pc["notice18"]?>
</textarea>
                                      <textarea name='notice19' cols='110' rows='3' class='input'><?=$pc["notice19"]?>
</textarea>
                                      <textarea name='notice20' cols='110' rows='3' class='input'><?=$pc["notice20"]?>
</textarea>
                                      <textarea name='notice21' cols='110' rows='3' class='input'><?=$pc["notice21"]?>
</textarea>
                                      <textarea name='notice22' cols='110' rows='3' class='input'><?=$pc["notice22"]?>
</textarea>
                                      <textarea name='notice23' cols='110' rows='3' class='input'><?=$pc["notice23"]?>
</textarea>
                                      <textarea name='notice24' cols='110' rows='3' class='input'><?=$pc["notice24"]?>
</textarea>
                                      <textarea name='notice25' cols='110' rows='3' class='input'><?=$pc["notice25"]?>
</textarea>
                                      <textarea name='notice26' cols='110' rows='3' class='input'><?=$pc["notice26"]?>
</textarea>
                                      <textarea name='notice27' cols='110' rows='3' class='input'><?=$pc["notice27"]?>
</textarea>
                                      <textarea name='notice28' cols='110' rows='3' class='input'><?=$pc["notice28"]?>
</textarea>
                                      <textarea name='notice29' cols='110' rows='3' class='input'><?=$pc["notice29"]?>
</textarea>
                                      <textarea name='notice30' cols='110' rows='3' class='input'><?=$pc["notice30"]?>
</textarea>
                                      <textarea name='notice31' cols='110' rows='3' class='input'><?=$pc["notice31"]?>
</textarea>
                                      <textarea name='notice32' cols='110' rows='3' class='input'><?=$pc["notice32"]?>
</textarea>
                                      <textarea name='notice33' cols='110' rows='3' class='input'><?=$pc["notice33"]?>
</textarea>
                                      <textarea name='notice34' cols='110' rows='3' class='input'><?=$pc["notice34"]?>
</textarea>
                                      <textarea name='notice35' cols='110' rows='3' class='input'><?=$pc["notice35"]?>
</textarea>
                                      <textarea name='notice36' cols='110' rows='3' class='input'><?=$pc["notice36"]?>
</textarea>
                                      <textarea name='notice37' cols='110' rows='3' class='input'><?=$pc["notice37"]?>
</textarea>
                                      <textarea name='notice38' cols='110' rows='3' class='input'><?=$pc["notice38"]?>
</textarea>
                                      <textarea name='notice39' cols='110' rows='3' class='input'><?=$pc["notice39"]?>
</textarea>
                                      <textarea name='notice40' cols='110' rows='3' class='input'><?=$pc["notice40"]?>
</textarea>
                                      <textarea name='notice41' cols='110' rows='3' class='input'><?=$pc["notice41"]?>
</textarea>
                                      <textarea name='notice42' cols='110' rows='3' class='input'><?=$pc["notice42"]?>
</textarea>
                                      <textarea name='notice43' cols='110' rows='3' class='input'><?=$pc["notice43"]?>
</textarea>
                                      <textarea name='notice44' cols='110' rows='3' class='input'><?=$pc["notice44"]?>
</textarea>
                                      <textarea name='notice45' cols='110' rows='3' class='input'><?=$pc["notice45"]?>
</textarea>
                                      <textarea name='notice46' cols='110' rows='3' class='input'><?=$pc["notice46"]?>
</textarea>
                                      <textarea name='notice47' cols='110' rows='3' class='input'><?=$pc["notice47"]?>
</textarea>
                                      <textarea name='notice48' cols='110' rows='3' class='input'><?=$pc["notice48"]?>
</textarea>
                                      <textarea name='notice49' cols='110' rows='3' class='input'><?=$pc["notice49"]?>
</textarea>
                                      <textarea name='notice50' cols='110' rows='3' class='input'><?=$pc["notice50"]?>
</textarea>
                                     
                                      <input type="submit" name="submit" value="Click here to update" class="input">
                                    </form>

</body>
</html>