Jump to content

White_Lily

Members
 View Profile  See their activity

  • Posts

    531

  • Joined

  • Last visited

  • Days Won

    1

 Content Type 

Posts posted by White_Lily

    Secure Registration

    in PHP Coding Help

    Posted

    Hey,

     

    I have written a secure registration form, and I have wondered could could be done to make even more secure. (I want to try and avoid capchas if possible.)

     

    Here is my current code:

     

    <?php

$register = $_POST["register"];
$name = mysql_real_escape_string($_POST["createName"]);
$username = mysql_real_escape_string($_POST["createUsername"]);
$password = $_POST["createPass"];
$rePass = $_POST["createRePass"];

if(!empty($register)){

foreach($_POST as $key => $value){
if(empty($value)){
$error = "<li class='error'>You cannot submit the form while it is empty.</li>";
}
}
if(!empty($name) && !empty($username) && !empty($password) && !empty($rePass)){
if($password != $rePass){
$error .= "<li class='error'>The passwords you typed do not match.</li>";
}

if(strlen($username) < 6 || strlen($username) > 30){
$error .= "<li class='error'>Your username is either too short or too long. Usernames can only be a minimum of 6 characters and no longer than 30 characters.</li>";
}

if(strlen($password) < 6){
$error .= "<li class='error'>Your password must be longer than 6 characters.</li>";
}

$compare = select("users") or die(mysql_error());
$use = mysql_fetch_assoc($compare);

if($username == $use["user_username"]){
$error .= "<li class='error'>That username is already in use. Choose another.</li>";
}

if(empty($error)){

$string = sha1(uniqid(rand(), true));
$salt = substr($string, 0, 3);
$hash = hash('sha256', $password);
$encrypt = $salt.$hash;

$newUser = insert("users", array("", $name, $username, $encrypt, $salt, $hash));

if($newUser){
session_start();
$_SESSION["user"] = $username;
$success .= "<li class='pass'>User added. Username: ".$_SESSION["user"]."</li>";
}else{
$error = "<li class='error'>".mysql_error()."</li>";
}
}
}

}

?>

<div class="heading" style="margin:0 0 5px 0;">Register</div>
<ul>
<?php

if(!empty($error)){
echo $error;
}if(!empty($warn)){
echo $warn;
}if(!empty($success)){
echo $success;
}

?>
</ul>
<form action="" method="POST">
<label>Name</label>
<div class="clear"></div>
<input type="text" name="createName" value="<?=$name?>" class="fields" />
<div class="clear"></div>
<label>Username</label>
<div class="clear"></div>
<input type="text" name="createUsername" value="<?=$username?>" class="fields" />
<div class="clear"></div>
<label>Password</label>
<div class="clear"></div>
<input type="password" name="createPass" class="fields" />
<div class="clear"></div>
<label>Repeat Password</label>
<div class="clear"></div>
<input type="password" name="createRePass" class="fields" />
<div class="clear"></div>
<input type="submit" name="register" value="Sign Up" class="buttons" />
</form>

    Php Forms

    in PHP Coding Help

    Posted

    Also, you will want to make sure that a user is logged in on the pages you only want members to view. i.e:

     

    <?php

if(empty($_SESSION["user"])){ // If the is no username session set, redirect the viewer to the login page or whatever page you want.
header("Location: login.php");
}

?>

    Renaming Image Files Script

    in PHP Coding Help

    Posted

    The script below is my upload script that renames files upon upload, however im sure it can be manipulated to rename files in a directory!

     

    <?php
if(!empty($_POST["upload_file"])){
$file = explode(".", $_FILES["file_upload"]["name"]);
$extension = strtolower($file[1]);

if(!empty($file[1])){
if(in_array($extension, array('jpg','jpeg', 'gif', 'png', 'bmp', 'doc', 'pdf', 'docx', 'mp4', 'zip', 'mov', 'mpg', 'wmv', '3gp'))){
$filepath = $_FILES["file_upload"]["tmp_name"];
$filename = uniqid().".".$file[1];
$target = $_SERVER["DOCUMENT_ROOT"]."template/uploads/".$filename;
if(move_uploaded_file($filepath, $target)){

$document = str_replace("_", " ", $file[0]);
$document = str_replace("-", " ", $document);

$url = $GLOBALS["siteUrl"]."uploads/".$filename;

$putFileInfo = insert("files", "file_name, file_url, file_original, new_file", "'$document', '$url', '".$_FILES["file_upload"]["name"]."', '$filename'");

if($putFileInfo){
$filePass = "File was successfully uploaded.";
}else{
$fileErr = "File could not be uploaded: ".mysql_error();
}

}else{
$fileErr .= "Could not move file.";
}
}else{
$fileErr .= "That is not an accepted file extension for the $page.";
}
}elseif(empty($file[1])){
$fileErr = "No file selected.";
}
}
?>

    :last-Child

    in CSS Help

    Posted

    that just makes it more difficult lol. after i have the design done im putting the category html inside a while loop, making the .group .last element useless unless i use JS (which im trying to avoid so far so good).

    :last-Child

    in CSS Help

    Posted

    The CSS is not working in all browsers.

     

    HTML:

     

    <div class="groupBox">
<div class="groupHeading">
Heading 1
</div>
<div class="group">
<div class="title-2">
<div class="catHeading">
Category 1
</div>
<div class="cateDescription">
This is category description 1
</div>
</div>
<div class="countTopics">
<b>Topic Count:</b><br>
<font>( 345 )</font>
</div>
<div class="clear"></div>
</div>
<div class="group">
<div class="title-2">
<div class="catHeading">
Category 2
</div>
<div class="cateDescription">
This is category description 2
</div>
</div>
<div class="countTopics">
<b>Topic Count:</b><br>
<font>( 545 )</font>
</div>
<div class="clear"></div>
</div>
<div class="clear"></div>
</div>

    :last-Child

    in CSS Help

    Posted

    Hi, I have a problem with my CSS as it is displaying the border-bottom property regardless of the :last-child element on the next style block.

     

    .groupCategories
{
display: block;
border-bottom: 1px solid #666666;
}

.groupCategories:last-child
{
border: 0px;
}

     

    Any ideas?

    Login Help

    in PHP Coding Help

    Posted · Edited by White_Lily

    If they are the same, then please explain why enabling the php.ini file does not display errors on one Internal Server Error, whereas HTTP 500 does display errors?

    I know what die; does, im just saying that I don't usually need it.

    Login Help

    in PHP Coding Help

    Posted

    val.php... where all the validation for the site goes.

     

    the user enters data into the login area on the home page, which then gets passed through val.php (above) which if successful redirects to profile.php...

    Login Help

    in PHP Coding Help

    Posted · Edited by White_Lily

    Hi, I have a problem in which I have validation that allows a user to sign into their account if they didn't provide an email address upon registration (which when they do provide an email address they get sent a generated password in their welcome email).

     

    Once they manage to sign in without the password they will get directed to a page where they will be asked to create one.

     

    However when this process happens it does not log them in, it just comes up with an Internal Server Error.

     

    My code is below:

     

    if(!empty($_POST["login"])){
$logUser = $_POST["logUser"]; $logPass = $_POST["logPass"];

if(empty($logUser)){
$logErr .= "<li class='error'>You can't sign in without providing your registered username.</li>";
}
$grabUserData = select("username, password", "users", "username = '$logUser'");
$data = mysql_fetch_assoc($grabUserData);

if($data["username"] != $logUser){
$logErr .= "<li class='error'>Invalid username</li>";
}
if(empty($logPass) && $data["password"] == "da39a3ee5e6b4b0d3255bfef95601890afd80709"){
session_start();
$_SESSION["UserProfile"] = $logUser;
$_SESSION["UserID"] = $data["user_id"];
header("profile.php");
}
}

     

    Any ideas would be useful.

     

    - Lily

     

    (I don't want posts about the security of my processing code... if I wanted opinions on this I would ask.)

    Listing Directory Files

    in PHP Coding Help

    Posted

    Hi, I have a problem where my while loop isn't displaying what I have asked it to display, everything works except for this while loop and I can't see what the problem is code below:

     

    while (false !== ($entry = readdir($handle)) && $fileGet = mysql_fetch_assoc($getfile)) {

if ($entry != "." && $entry != "..") {

$listFile = '<td>'.$entry.'</td>';

echo '<tr>';
echo '<td>'.$fileGet["file_name"].'</td>';
echo $listFile;
echo '<td>'.$fileGet["file_url"].'</td>';
echo '<td><a href="delete-file.php?id='.$fileGet["file_id"].'&file='.$fileGet["file_original"].'">Delete</a>
</td>';
echo '</tr>';


}
}

     

    Any Ideas? Thanks - Lily

    Validate The Form Using Recaptcha, On Success Post Data To New Form

    in PHP Coding Help

    Posted

    as SocialCloud said, AccountCreation.php shouldn't have to be complex, after all you said it is dealing with $_POST variables so surely it is only checking them for empties, maybe a few text patterns, and depending on your site content and what the users profile is maybe even directory creations? these should all be able to be put into a function without any problems. the only changes you would have to make is how it outputs any messages from validation.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.