PHP - How To Jquery Inbox System

Hi all

I have been looking though loads of tutorials regarding log in method for websites (not APIs), and cant help find that they are outdated.

So I am asking what is the correct way to create a log in system using php?

Modern websites use JavaScript for asynchronous web requests so this requirement should also be catered for. APIs and mobile apps use access tokens which is very secure if implemented correctly.

Can we use the token principle for websites? As the way I see it that most php log in systems use php sessions and they create a session and save some data in this session when the user successfully authenticates, however the session id is held in a cookie so if the cookie is stolen then they have access to your account.

API access tokens are expired and refreshed periodically so is there such a implementation method for web sites too?

i am trying to add a like system to my forum similar to facebook where it shows how many people like a post.

this is my code so far:

$like_list = "";
            
            $likes = explode("|", $post_info['post_likes']);
            $amount_likes = count($likes);
            $ac_likes = ($amount_likes / 2);
            $slice = array_slice($likes, 0, 4, true);
            $remain = array_slice($likes, 4, $ac_likes, true);
            $remain_num = count($remain);
            
            if ($ac_likes >= 4)
            {
                for($i=0; $i<$ac_likes; $i+=2)
                {
                    $like_list .= $likes[$i].", ";
                }
                $like_list .= " and $remain_num others like this";
            }
            elseif ($amount_likes == 1    )
            {
                $like_list .= "0 people like this";
            }
            elseif ($ac_likes == 1)
            {
                $like_list = implode(", ", $likes);
                $like_list .= " likes this";
            }
            else
            {
                $like_list = implode(", ", $likes);
                $like_list .= " like this";
            }

$post_info['post_likes'] contains data like:

Code: [Select]
user1|123456789|user2|123456789
where the number is the timestamp.

unfortunatly $like_list prints the username and the timestamp when i would like it to only display the username. This means
printing every 2nd element in the array starting from 0. I have seen this done with for loops but i am not using one therefore i am stuck. Any ideas? and is this the best database setup for likes? the post_likes column is added on to the end of the post table.

  Hi this is my login script i do have the html if you need to see it please ask & i was wondering if anyone would be kind enough to tell me how i can get my ban system to work Thanks

<?php

require 'connect.php';

if(isset($_POST['submit'])) {

	$username = $_POST['username'];
	$password = $_POST['password'];

	//Prevent hackers from using SQL Injection
	$username = stripslashes($username);
	$password = stripslashes($password);
	$username = mysql_real_escape_string($username);
	$password = mysql_real_escape_string($password);

	$sql = "SELECT * FROM $tbl_name WHERE username='$username' AND password='$password'";
	$result = mysql_query($sql);
	$count = mysql_num_rows($result);

	$user_level = $_GET['user_level'];

	$_SESSION['user_level'] = $user_level;

	if($count == 1) {

		$_SESSION['username'];
		$_SESSION['password'];
		header("Location: index.php");
	} else {

		echo "Please check the username and password you entered is correct.";
	} if($_SESSION['user_level'] == 0) {
		$_SESSION['username'];
		$_SESSION['password'];
		header("Location: index.php");
		
	} else if($_SESSION['user_level'] == -1) {

		die();
		header("Location: banned.php");

	} else if($_SESSION['user_level'] < -1) {
		die();
		echo "An error has occurred please contact your administrator.";

	} else if($_SESSION['user_level'] == 1) {
		$_SESSION['username'];
		$_SESSION['password'];
		header("Location: admin.php");

	}


}

?>

Edited by Tom8001, 23 November 2014 - 12:18 PM.

Hi all
 
I am building a website for a restaurant where the registered user can do booking in the booking page where user finds the booking form. my problem is I created the log in system but cannot workout with the booking page.
 
I have this scenario -
 
Customer visits site & registers details (name, email etc) on a "registration page" (creating a username & password which goes into your database) - done that
 
Next day, customer visits site and logs in on a "log in page" using the username & password from the previous day which is now stored in your database. Can now make a booking based on this log in. (cannot do this)

i am making a private messaging system like hotmails where the message list appears on the left. Then when you click on one of them the box on the right loads the email. The problem is i dont really know how to go about it. Anyone have any pointers?

Hi All

I am wanting to create an online booking system. Has anyone got any suggestions on this?

Adi

Looking for the best way to set-up the db of a messaging system. Here's what I have so far (basically pulled from another forum), don't know if Table1 is even really necessary:

Table1:
id
user_message_id
recepient_id
recepient_read

Table2:
user_message_id
sender_id
sender_read
subject
message
created_at
updated_at



Basically it needs to function where, someone submits a message to the admin or moderator, the admin/moderators can review and reply, and then the user can submit another reply, and keeps going indefinitely. I want each reply to show up almost like a forum thread.

How would I chain the reply messages to the original messages?

<form action='index.php'  method='POST'  enctype='multipart/form-dat'>

<select name='votes'>
  <option>SEATOWN</option>
 <option>vote1</option>
 <option>vote2</option>
 <option>vote3</option>
</select>
<input type='submit' name='vote' value='Vote'>
</form>
<?php

$vote=$_GET['votes'];
if(isset($_POST['vote']))
{
echo "voted";
echo $vote;
}


?>

why would this not echo out anything for $vote???


cheers matt

I need help coming up with a better combat system for my PHP RGP-MMO. Is anyone interested?

Right now it is basically offense vs. defense. Whichever is greater wins, but is honestly getting dull.

Total Offense = User Total Units + User Unit Upgrades + User Unit Bonuses.

Total Defense = Enemy Total Units + Enemy Unit Upgrades + Enemy Unit Bonuses.

I have database table EMAIL[e_id,receiver_email,sender_email,email_Subject,date_time,Text_body]

i have displayed sender_email,Email_subject,Date_time in html table
by using
 select sender_email,Email_subject,Date_time from email where receiver_email=$current _user
i need to open email_body by clicking the sender_email
problem is that how can i get value of first cell of table in the same row by clicking any other column
or if you have alternative
as yahoo displayes all emails received in inbox
by clicking any sender it opens that specific email

I've abandoned my old script and switched to this one: http://www.evolt.org/node/60384

I got it working on my site just fine (djsmiley.net/members/register - you can test it out if u want). i just want to know how i can put all of the code into the pages i created using my template.

It doesn't specify how this can be done in the tutorial, which is why im confused. I've tried everything but keep getting errors. Help?

I've created a template system.

I've got a function to assign a page (the templates are in /template/skin).
It all works fine in the main root, but if I had a directory it won't work.

$dir = "template/skin";
That is found in template/

I need to be able to assign the template even in directories.

Hello,

I have the following code


Code: [Select]
class Uploads extends Controller
{
 public function __construct()
 {
  parent::__construct();

  if (empty($_FILES))
  {
   log_message('error', 'Uploads - files empty');
   exit('No files uploaded');
  }

  ini_set('memory_limit', '128M');

  $this->load->helper('file');
  $this->load->helper('helpers');
  $this->load->model('uploads_model');

 }

 public function font_handler()
 {
  $this->uploads_model->font_handler();
 }

}

class Uploads_model extends Model
{
    public function font_handler()
    {
  $config = array(
   'max_size'     => '8388',
   'allowed_types' => 'ttf',
   'upload_path'   => 'assets/fonts/'
  );

  $this->load->library('upload', $config);

  if ($this->upload->do_upload('Filedata'))
  {
   $file = $this->upload->data();
   $jsFile = $file['raw_name'].'.js';
   $query = $this->db->where('location', 'menuFont')->get('fonts')->row();

   if ($query->customFile != '' && file_exists('assets/fonts/'.$query->customFile))
         {
    unlink('assets/fonts/'.$query->customFile);
   }

   $path    = getcwd() . '/assets/fonts/cufon/convert.php';
   $command = 'php ' . $path . ' -u "U+??" ' . $file['full_path'] . ' 1> ' . getcwd() . '/assets/fonts/' . $jsFile;

   system($command);
  }
 }

}


Ok so, the ttf file is uploaded correctly and I can run $command from the command promt in putty and it works perfect, but when I try to run the same command from system() the js file just contains (from the controller) "No files uploaded" I have no idea why this is happening? Anyone have any ideas?  Also one thing i'm not sure about is if it should be 1> or > when creating the js file?!?


Thanks guys!

I'm busy with a small storage system for my site, but i encounter some problems with it.
I have successfully managed to get all products from the order, and traced on what spots those product are in the warehouse.
It looks like this atm http://img37.imageshack.us/img37/7302/tableordereng.jpg

this is the code i have atm (sorry i program in dutch, i hope its abit understandable)

Code: [Select]
<?php

$query = "select * from `orderregel` WHERE `ordernr`='".$ordernr."'";
   $row = mysql_fetch_array( $query );
            
   echo "<table border=1 width=680 bgcolor=#FFFFFF>
     <tr>
            <th width= 100>artikelnummer</th>
        <th width= 100>productnaam</th>
            <th width= 40>Plaats</th>
        <th width= 40>aantal in magazijn</th>
            <th width= 40>aantal nodig</th>          
     </tr>
         </table>";  
                      
            foreach ( self::find_by_sql($query) as $user)
            {   
                $query2 = "select * from magazijn WHERE artikelnr = ".$user->artikelnr."";
                $row = mysql_fetch_array( $query );
            
                foreach ( self::find_by_sql($query2) as $magazijn)
                {
                echo "<table class= order_overzicht border= 0 width= 680>";
                echo "<tr>    
                        <td width= 100>".$magazijn->artikelnr."</td>            
                        <td width= 100>".$magazijn->productnaam."</td>
                        <td width= 40>".$magazijn->magazijn_plaats."</td>
                        <td width= 40>".$magazijn->aantal."</td>
                        <td width= 40>".$user->aantal."</td>
                      </tr>
                      </table>";
                }
            }
?>

The problem i have now is, that i want it to do the following.
for example someone orders 430 packages of Haribo Kers Cola (see imageshack upload). I first want it to empty spot 16 in the wherehouse.
Only when spot 16 is empty, i want it to go to the next spot (19) wich contains the same product.

the end result would be something like this:

http://img690.imageshack.us/img690/6246/tableorderneweng.jpg

i hope you guys can help me out on this one, becouse i have no clue how i can resolve this problem

thanks in advance

(Sorry btw for my bad english )