nade93

i have and have removed, however how do i prevent this?

actually, just found this on one of my files www.cecplc.com/images/image.php i think this is how they are getting in

apologies for bumping is there some security i can write into my code that will deter people from being able to hack into my files?

ha ha sorry, my bad! Basically its all custom coding, but they are generally placing the codes into my image file. so www.yoursite.com/images/processprofile.php etc. there are no php file thats exist in these files or should there be files that would allow this I am using a mac and to my knowledge there are no security issues. My passwords are all secure etc

Hi I am constantly getting hacked when I use PHP files. Phishing scammers keep upliading files to my various websites and my account as a result gets suspended. I have tried chmoding the files, however they still manage to bypass the system Can anyone help please? Thanks

Sorry to bump but really struggling, has anyone any ideas please?

Hi All I am unsure as to how to begin a project, basically, I am wanting to build a site that will hold funds in an escrow type system then pay out upon project completion. The site will adopt the same principal as peopleperhour.com but not be the same format or subject, I just need that type of functionality. Can someone steer me in the right direction i.e: 1. how do i set up the escrow account? or what software do i need for this? 2. the scripting that may help me build this system? Thanks in advance

thanks your a star!!!!

Hi All I wanted to start a more specific thread for this probelm as it seemed to have got lost in my previous one. Basically, I have 5 Image file fields and at present all upload files and paths to a directory and to fields in my database. However, I am wanting to write a bit of coding that will allow me to place a standard image into the data base field if the form field is left empty below is the code as its stands at the moment. $image1 = ''.$_FILES["image1"]["name"]; move_uploaded_file($_FILES["image1"]["tmp_name"] , "$folder".$_FILES["image1"]["name"]); $image2 = ''.$_FILES["image2"]["name"]; move_uploaded_file($_FILES["image21"]["tmp_name"] , "$folder".$_FILES["image21"]["name"]); $image3 = ''.$_FILES["image3"]["name"]; move_uploaded_file($_FILES["image3"]["tmp_name"] , "$folder".$_FILES["image3"]["name"]); $image4 = ''.$_FILES["image4"]["name"]; move_uploaded_file($_FILES["image4"]["tmp_name"] , "$folder".$_FILES["image4"]["name"]); $image5 = ''.$_FILES["image5"]["name"]; move_uploaded_file($_FILES["image5"]["tmp_name"] , "$folder".$_FILES["image5"]["name"]); $image6 = ''.$_FILES["image6"]["name"]; move_uploaded_file($_FILES["image6"]["tmp_name"] , "$folder".$_FILES["image6"]["name"]); Any ideas please?

by the way for people with a similar probel to check database find code i used below $query = mysql_query("SELECT * from directory where user_id='$user_id'"); if(mysql_num_rows($query) != 0) { echo "You have already uploaded a listing. Please go to EDIT LISTING to amend your listing details"; } else { thanks for the advise guys x

right pretty much got everything to work, however now i am trying to produce an if statement that will inset automatic image path in the mysql field if the field is left empty the code below uploads the images into the databse and into a directory fine, however if the form field is left empty i want it to return /directory_images/noimage.jpg . Been fiddling round with if($image1=='') but not getting far at all $image1 = '/directory_images/'.$_FILES["image1"]["name"]; move_uploaded_file($_FILES["image1"]["tmp_name"] , "$folder".$_FILES["image1"]["name"]);

sorry to bump, are you meaning running an if statement? i am sorry i am pretty new to all this and would be grateful for a little more information!

sorry going to have to be more specific, (imagine the most basic of users)

I think i have the coding for the image upload (will post it when everything works) however, I am still stuck on the checking to see if user id already exists if so error message can anyone help with this please?

Hi All I am working on some code and want to do some different things with it (please see code below) What I want to be able to do: 1. Add directory to database 2. image1-6 should be converted to file paths and images inserted into directory (i.e. /directoryimages/) 3. before inserting into a directory, the code should check if the userid already exists in the form. If it does to return an error message Can anyone give me some guidance please as its new terrritory for me! INSERT INTO `directory` (`id`, `user_id`, `category`, `title`, `address`, `region`, `country`, `star_rating`, `website`, `email`, `telephone`, `short_desc`, `long_desc`, `image1`, `image2`, `image3`, `image4`, `image5`, `image6`, `latest_offers`, `payment`, `mainfeature`, `minifeature`, `meal_type`, `child`, `opening`) VALUES (`id`, `user_id`, `category`, `title`, `address`, `region`, `country`, `star_rating`, `website`, `email`, `telephone`, `short_desc`, `long_desc`, `image1`, `image2`, `image3`, `image4`, `image5`, `image6`, `latest_offers`, `payment`, `mainfeature`, `minifeature`, `meal_type`, `child`, `opening`) Thanks in advance!!!

Hi I have already set up a memers area and have a custom CMS system that I am usiing, however, I need a subscription (paid) element to my site that will only allow access to the member area if the user has paid the subscription fee. Can anyone recommend any decent scripts please? Paypal subscriptions seems a little basic thanks in advance

all sorted, just needed to change directory (../images instead of /images) thanks guys your brill! x

just had a thought, my field is set up as a varchar utf8 general is that why the field is not displaying?

thanks, however this is not working, its not displaying the image,

sorry, i have no idea what you mean, i want to use my own customised stars

Hi All I am trying to create a star system, so basically is the mysql field =5, 5 star images are displayed. Is there a way there a way to do this please?

ok got the data to show by using <![CDATA[ which works great, however i am still confused as to where to put the stle elements so they work for example at the min have them like this echo "<extraHeight>60</extraHeight>"; echo "<descriptionGradient visible=\"true\" />"; echo "<draggerGradient visible=\"true\" />"; echo "<bgStroke visible=\"true\"/>"; echo "<draggerStroke visible=\"true\"/>"; echo "<descriptionBackground>0x000000</descriptionBackground>"; echo "<descriptionStroke>0x666666</descriptionStroke>"; echo "<bgGradientColor>0x1E1E1E</bgGradientColor>"; echo "<arrowsOver>0xFFCC00</arrowsOver>"; echo "<arrowsNormal>0xCCCCCC</arrowsNormal>"; echo "<strokeOver>0x666666</strokeOver>"; echo "<strokeNormal>0x333333</strokeNormal>"; echo "<draggerBgOver>0x0D0D0D</draggerBgOver>"; echo "<draggerBgNormal>0x000000</draggerBgNormal>"; echo "<draggerGradientNormal>0x333333</draggerGradientNormal>"; echo "<draggerGradientOver>0x404040</draggerGradientOver>"; but they are not having any effect

hi all i am basically trying to recreate the xml below, using data from mysql. I can get the data off effectively, however, it is obviously not coming out in the correct format to fit into my template. XML CODE <?xml version=”1.0” encoding=”UTF-8”?> <option> <info><![CDATA[<p><Text_Preset_2>THIS IS THE TITLE</Text_Preset_2></p> <Text_Preset_3> THIS IS WHERE THE CONTENT WILL GO</Text_Preset_3> ]]></info> <extraHeight>60</extraHeight> <!-- ______________GRADIENT SETTINGS_________________ --> <!-- DESCRIPTION GRADIENT --> <descriptionGradient visible="true" /> <!-- DRAGGER GRADIENT --> <draggerGradient visible="true" /> <!-- ______________STROKE SETTINGS_________________ --> <bgStroke visible="true"/> <draggerStroke visible="true"/> <!-- ______________COLOR SETTINGS_________________ --> <!-- DESCRIPTION BOX --> <descriptionBackground>0x000000</descriptionBackground> <descriptionStroke>0x666666</descriptionStroke> <!-- BACKGROUND GRADIENT --> <bgGradientColor>0x1E1E1E</bgGradientColor> <!-- DRAGGER --> <arrowsOver>0xFFCC00</arrowsOver> <arrowsNormal>0xCCCCCC</arrowsNormal> <strokeOver>0x666666</strokeOver> <strokeNormal>0x333333</strokeNormal> <draggerBgOver>0x0D0D0D</draggerBgOver> <draggerBgNormal>0x000000</draggerBgNormal> <draggerGradientNormal>0x333333</draggerGradientNormal> <draggerGradientOver>0x404040</draggerGradientOver> </option> the parts below the xml option is styling for the page within a flash file and needs to be entered into the code I am at present using this php coding which allows me to view the xml, however, the styling is not correct and shows up as NULL in my flash file <?php header ("content-type: text/xml"); mysql_connect("local", "db", "pw") or die(mysql_error()); mysql_select_db("db") or die(mysql_error()); $result = mysql_query("SELECT * FROM articles WHERE id=1"); $row = mysql_fetch_assoc($result); echo '<?xml version="1.0" encoding="utf-8"?>'; echo "<option>\n"; $finaldata = explode("|", "Songname|location"); echo "\t<info>\n"; echo "\t\t<Text_Preset_2>" . $row['article_name'] . "</Text_Preset_2>\n"; // Escaping illegal characters $row['content'] = str_replace("&", "&", $row['content']); $row['content'] = str_replace("<", "<", $row['content']); $row['content'] = str_replace(">", ">", $row['content']); $row['content'] = str_replace("\"", """, $row['content']); echo "\t\t<Text_Preset_3>" . $row['content'] . "</Text_Preset_3>\n"; echo "\t</info>\n"; echo "</option>\n"; ?> can anyone help please?

thanks greensmurf, but thats not what im after basically, trying to create a results page from a form and need two things that am really stuck on. 1. If the form value ="" then i need it to return all the results in that table field. 2. I need to then take those results and count certain values. For example, how many case_open fields have the "yes" value and then return that value as a number Code for part 1. $ethnic = $_REQUEST['ethnic']; $gender = $_REQUEST['gender']; $referral = $_REQUEST['referral']; $age = $_REQUEST['age']; $month = $_REQUEST['month']; $year = $_REQUEST['year']; $query = "SELECT * from tbl WHERE"; if ((!empty($_POST['ethnic']))&&($_POST['ethnic'] != 'all')) { $query .= " ethnic_background like '". addslashes($_POST['ethnic'])."%' "; } if ((!empty($_POST['gender']))&&($_POST['gender'] != 'all')) { $query .= " and gender like '". addslashes($_POST['gender'])."%' "; } if ((!empty($_POST['age']))&&($_POST['age'] != 'all')) { $query .= " and age_range like '". addslashes($_POST['age'])."%' "; } if ((!empty($_POST['month']))&&($_POST['month'] != 'all')) { $query .= " and date_received_month like '". addslashes($_POST['year'])."%' "; } if ((!empty($_POST['year']))&&($_POST['year'] != 'all')) { $query .= " and date_received_year like '". addslashes($_POST['year'])."%' "; } $result = mysql_query($query); $numrows=mysql_num_rows($result); if ($numrows == 0) { echo "<div class=\"heading\">Sorry, your search returned no results. Please go back and try again!</div>"; } I then run a loop i.e. <? while ($row = mysql_fetch_assoc($result)) { ?> Then i need to return the results below in a table i.e. <table><tr> <td valign="top" height="30" style="border-bottom:1px #ccc solid;" class="bodytext_table"><div align="left"> Number of IMHA cases opened</div></td> <td style="border-bottom:1px #ccc solid;"> <div align="right" style="color:#993366; font-size:12px; font-weight:600;">number here</div></td> </tr></table> can someone shed some light please, its really urgent and need it tonight and have searched high and low for answers!!! any help appreciated! thanks

this only gives me the number 1 I need to make it count the number of results within my query that feature the "yes" for example