Jump to content

markbett

Members
  • Posts

    133
  • Joined

  • Last visited

    Never

Posts posted by markbett

  1. I am looking to impliment a digital maping system similar to google maps where I can take floorplans of my company and map assets to certain locations and search for them after.  like google-maps meets an office people-finder so that when you are looking for printer 23-541-a you can just put it in the interface and it will bring up the map of where the asset is in the company....

     

    I ahve been looking for a tutorial on creating something like this or an existing product but have had no luck... can someone point me in the right direction

  2. where (((scf_mem_id={$R}) and (scf_frnd_id={$social_mem_id}) OR ((scf_mem_id={$R}) and (scf_frnd_id={$social_mem_id} ))

    The section before and after teh OR are the same cause i dont understand what you are doing but that will work when you get the right stuff after the or
  3. it in the LIMIT command and when you choose which record to start with...

    Definition: Limit is used to limit your MySQL query results to those that fall within a specified range. You can use it to show the first X number of results, or to show a range from X - Y results. It is phrased as Limit X, Y and included at the end of your query. X is the starting point (remember the first record is 0) and Y is the duration (how many records to display).
    Also Known As: Range Results
    Examples:
    SELECT * FROM `your_table` LIMIT 0, 10
    This will display the first 10 results from the database.
    SELECT * FROM `your_table` LIMIT 5, 5
    This will show records 6, 7, 8, 9, and 10
  4. ok the code on that page now looks somethign like this:

    [code]<?
    var_dump($_SESSION);
    echo "<hr>";
    //determien the event hosts name
    $sql = mysql_query("SELECT first_name, last_name, email_address AS host_email FROM users WHERE
    id ='$event_host'")
    //id ='15'")//
    or die (mysql_error());
    if(!$sql){
            echo 'Error getting determining event host: '.
                  mysql_error();
          } else {
    while($row = mysql_fetch_array($sql)){
    stripslashes(extract($row));
    $event_host = $first_name.' '.$last_name;
    }
    }
    var_dump($_SESSION); ?>[/code]

    you can see THAT is the section of code that is causeing the session variable  to be RESET WHY???

    my login script ONLY should set those if the login isnt set to being true

    [code]
    if($_SESSION['login'] != TRUE){
    echo "i ran again cause i suck";
    $username = mysql_real_escape_string($_POST['username']);
    $password = mysql_real_escape_string($_POST['password']);
        $validate = mysql_query("SELECT * FROM users
                              WHERE username='$username'
                              AND password = md5('$password')
                              AND verified='1'  AND disabled='0'
                              ") or die (mysql_error());
                             
      if(mysql_num_rows($validate) == 1){
          while($row = mysql_fetch_assoc($validate)){
            $_SESSION['login'] = true;
            $_SESSION['userid'] = $row['id'];
            $_SESSION['first_name'] = $row['first_name'];
            $_SESSION['last_name']  = $row['last_name'];
    [/code]

    wtf is going on.....
  5. you name the form elements  whatever you like (term1 term2)
    then when you process the form you get your $_POST['term1'] clean it for sql injections then set it to a variable

    $_post['term1']=$term1
    etc etc

    then you can use them in your query
    sql=("SELECT * FROM blue WHERE something=".$term1." OR ".#term2") blah blah
  6. i added [code]if($_SESSION['login'] != TRUE){
    echo "i ran again cause i suck";
    $username = mysql_real_escape_string($_POST['username']);
    $password = mysql_real_escape_string($_POST['password']);[/code] to make sure that the session isnt being set every time a page changes and those variables are only being set by that script a single time (because i dont see the i ran again message)
  7. and thats why im puzzled because it is...  you can see above and see all the code that is being called on that page and nowhere on there is a sesssion variable being changed.... the only thing i did was add 3 new variables.....
  8. the ONLY thing that could possibly make sense is that the SQL query that runs on that page that returns variables with the same names as those that were set in the session way back is what is causeing it to change but it shouldnt because....

    [code]case "validate":
    //ensure they are not already logged in//
    if($_SESSION['login'] != TRUE){

    $username = mysql_real_escape_string($_POST['username']);
    $password = mysql_real_escape_string($_POST['password']);
        $validate = mysql_query("SELECT * FROM users
                              WHERE username='$username'
                              AND password = md5('$password')
                              AND verified='1'  AND disabled='0'
                              ") or die (mysql_error());
                             
      if(mysql_num_rows($validate) == 1){
          while($row = mysql_fetch_assoc($validate)){
            $_SESSION['login'] = true;
            $_SESSION['userid'] = $row['id'];
            $_SESSION['first_name'] = $row['first_name'];
            $_SESSION['last_name']  = $row['last_name'];
            $_SESSION['email_address'] = $row['email_address'];
    $_SESSION['username'] = $row['username'];
            $_SESSION['cid'] = $row['cart_id'];
            setcookie('cid', $unique_cid, time()+24*3600*60);
    [/code]

    it shouldnt ever set those variable unless you arent logged in  and the session id never changes
  9. so you can see the session varaible change there but there is NOTHING in the code that i can see that is doing that... the code for the page is:
    [code]
    <?php
    include $_SERVER['DOCUMENT_ROOT'].'/sbqa/layout2.php';

    $req = (!isset($_REQUEST['req'])) ? 'default' : $_REQUEST['req'];
    switch($req){

    case "view_day":
    $time = mysql_real_escape_string($_GET['date']);
    if($time<1){
    $time=time();
    }
    $today = date('j',$time);
    //myheader("smile");
    include $_SERVER['DOCUMENT_ROOT'].'/sbqa/html/day_view.htm';
    footer();
    break;

    case "view_event":
    $event_id=mysql_real_escape_string($_GET['event_id']);
    $sql = mysql_query("SELECT * FROM events, organisers WHERE
    event_id ='{$event_id}' AND events.event_org = organisers.org_id")
    or die (mysql_error());
    if(!$sql){
            echo 'Error getting event information: '.
                  mysql_error();
          } else {
    while($row = mysql_fetch_array($sql)){
    stripslashes(extract($row));
    $start_time = strtotime($start_time);
    $stop_time = strtotime($stop_time);
    $rsvp_close = strtotime($rsvp_close);
    $start=date('l, M. j g:i A', $start_time);
    $stop=date('l, M. j g:i A', $stop_time);
    $rsvp=date('l, M. j g:i A', $rsvp_close);
    $address_url = '<a href="http://maps.google.com/maps?q='.$address.'" target="_blank">&nbsp;<img src="'.$_SERVER['SITE_ROOT'].'/sbqa/images/map.jpg" width="30" height="15">&nbsp;&nbsp;'.$location.'</a>';

    //set the open to variable
    if($open_to=='0'){
    $open_to='Everyone';
    }elseif($open_to=='1'){
    $open_to='Members Only';
    }elseif($open_to=='2'){
    $open_to='Members and Invited Guests';
    }elseif($open_to=='3'){
    $open_to='Invitation Only';
    }elseif($open_to=='4'){
    $open_to='Asian Members Only';
    }elseif($open_to=='5'){
    $open_to='All Asians';
    }else{
    $open_to='An Error Occured';
    }
    //determine if the event is full
    if($max_cap=='0'){
    $space_avail="This event does not have an attendance limit.";
    }else{
    if(($max_cap-$attending)<='0'){
    $space_avail="This event is full.";
    }else{
    $space_avail="There are currently ".($max_cap-$attending)." spaces left.";
    }
    }
    //determine if the waiting list is full
    if($max_cap=='0'){
    $wait_avail="This event does not have a waiting list.";
    }else{
    if(($max_cap+$wait_list-$attending)<='0'){
    $wait_avail="There is no room on the waiting list for this event.";
    }else{
    If($max_cap<$attending){
    $wait_avail="There are currently ".($max_cap+$wait_list-$attending)." spaces left on the waiting list.";
    }else{
    $wait_avail="There are currently ".$wait_list." spaces left on the waiting list.";
    }
    }
    }
    //deadline text
    if($rsvp_close>=time()){
    $rsvp_countdown= round(($rsvp_close-time())/86400);
    if($rsvp_countdown>1){
    $rsvp_text="Make sure you get in on this event while you can.  There are only ".$rsvp_countdown." days left to RSVP to this event.";
    }else{
    $rsvp_text="There is not much time left at all to RSVP to this event.  You need to act quickly";
    }
    }else{
    $rsvp_text="Unfortunately the deadline to RSVP to this event has passed.  Contact the event host if need further assistance.";
    }

    //create the attendance list
    if($attend_vis == 1){
    $attend_list="This event does not have a public attendance list";
    }elseif($attend_vis == 0){
    $sql=@mysql_query("SELECT name, guest_of, user_id FROM event_rsvp
    WHERE event_id = '$event_id' ORDER BY rsvp_id ASC") or die (mysql_error());
    if(!$sql){
    echo 'Error getting event information: '.mysql_error();
    } else {
      while($row = mysql_fetch_array($sql)){
        stripslashes(extract($row));
    If(isset($user_id)){
    $attend_list.= $name."<br />";
    }else{
    $attend_list.=  "- Guest of ".$guest_of."<br />";
    }
    }
    }
    }else{
    $attend_list='An Error Occured';
    }

    //determien the event hosts name
    $sql = mysql_query("SELECT first_name, last_name, email_address AS host_email FROM users WHERE
    id ='$event_host'")
    //id ='15'")//
    or die (mysql_error());
    if(!$sql){
            echo 'Error getting determining event host: '.
                  mysql_error();
          } else {
    while($row = mysql_fetch_array($sql)){
    stripslashes(extract($row));
    $event_host = $first_name.' '.$last_name;
    }
    }

    //we set variables here for the contacts

    $_SESSION['host_name']= $event_host;
    $_SESSION['host_email']= $host_email;
    $_SESSION['subject']= "Re: SBQA Event ".$title;

    //the form where all data is dumped
    include $_SERVER['DOCUMENT_ROOT'].'/sbqa/html/event_view.htm';
    }
    }
    footer();
    break;

    default:
        //myheader("smile");
    include $_SERVER['DOCUMENT_ROOT'].'/sbqa/html/6_month.htm';
    footer();
    break;

    /*


    include $_SERVER['DOCUMENT_ROOT'].'/sbqa/html/day_view.htm';
    footer();*/
    }
    ?>
    [/code]
  10. i added [code]echo session_name();  // Displays current session name in effect
    echo session_id();  // Displays the current session id[/code] and the session is staying the same i will add what you requested right now
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.