Jump to content

bluethundr

Members
 View Profile  See their activity

  • Posts

    34

  • Joined

  • Last visited

    Never

Profile Information

  • Gender
    Not Telling

bluethundr's Achievements

Member

Member (2/5)

0

Reputation

  1. bluethundr
    Hello, I am trying to get the hang of php using some examples that I found in a book. I've been making progress lately, but one thing has me a bit stumped. In an HTML form that I am echoing through PHP I would like to embed smaller chunks of php in the code like so: echo '<br /><br /> <form method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>"> <label for="subject">Subject of email:</label><br /> <input id="subject" name="subject" type="text" value="<?php echo $subject;?>"><br /> <label for="elvismail">Body of email:</label><br /> <textarea id="elvismail" name="elvismail" rows="8" cols="40">"<?php echo $text;?>" </textarea><br /> <input type="submit" name="Submit" value="Submit" /> </form>'; If I do embed the smaller chunks of php in the form the way I've just shown you the script instantly breaks and the web page shows only a white screen of death. And I see this in the web server logs [sat Jun 30 19:12:54 2012] [notice] child pid 7769 exit signal Segmentation fault (11) If I remove the smaller bits of php as I show here the web page starts working again echo '<br /><br /> <form method="post" action="sendemail.php"> <label for="subject">Subject of email:</label><br /> <input id="subject" name="subject" type="text"><br /> <label for="elvismail">Body of email:</label><br /> <textarea id="elvismail" name="elvismail" rows="8" cols="40"></textarea><br /> <input type="submit" name="Submit" value="Submit" /> </form>'; Here, I'll show the entire script so you can get a better sense of what it does <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Make Me Elvis - Send Email</title> <link rel="stylesheet" type="text/css" href="style.css" /> </head> <body> <img src="blankface.jpg" width="161" height="350" alt="" style="float:right" /> <img name="elvislogo" src="elvislogo.gif" width="229" height="32" border="0" alt="Make Me Elvis" /> <p><strong>Private:</strong> For Elmer's use ONLY<br /><br Write and send an email to mailing list members.</p> <?php error_reporting(E_ALL); ini_set('display_errors', 'On'); if (isset($_POST['Submit'])) { $from = 'bluethundr@mydomain.com'; $subject = $_POST['subject']; $text = $_POST['elvismail']; $output_form = "false"; if (empty($subject) && empty($text)) { echo 'You forgot the email subject and body.<br />'; $output_form = 'true'; } if (empty($subject) && !empty($text)) { echo 'You forgot the email subject.<br />'; $output_form="true"; } if ((!empty($subject)) && empty($text)) { echo 'You forgot the email body text.<br />'; $output_form="true"; } } else { $output_form = 'true'; } if ($output_form == 'true') { echo '<br /><br /> <form method="post" action="sendemail.php"> <label for="subject">Subject of email:</label><br /> <input id="subject" name="subject" type="text"><br /> <label for="elvismail">Body of email:</label><br /> <textarea id="elvismail" name="elvismail" rows="8" cols="40"></textarea><br /> <input type="submit" name="Submit" value="Submit" /> </form>'; } else { $dbc = mysqli_connect('127.0.0.1', 'admin', 'secret ', 'elvis_store') or die('Error connecting to MySQL server.'); $query = "SELECT * FROM email_list"; $result = mysqli_query($dbc, $query) or die('Error querying database.'); while ($row = mysqli_fetch_array($result)){ $to = $row['email']; $first_name = $row['first_name']; $last_name = $row['last_name']; $msg = "Dear $first_name $last_name,\n$text"; mail($to, $subject, $msg, 'From:' . $from); echo 'Email sent to: ' . $to . '<br />'; } mysqli_close($dbc); } ?> </body> </html> I was hoping that someone might be out there that could understand this problem and point out where I'm going wrong. Thanks!
  2. bluethundr
    I wrote an application in PHP that intends to authenticate users against a MySQL database. If you surf to localhost/login.html you see the login page. I created an authentication database and added a user to it. When I try to sign in as the user I added to the database instead of logging into the application the user is immediatly shunted to the logout page saying that the user cannot login : <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html401/loose.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Login</title> </head> <body> <h1>Application Login Page</h1> <form method="POST" action="logincheck.php"> <table> <tr> <td>Enter your username:</td> <td><input type="text" size="10" name="loginUsername"></td> </tr> <tr> <td>Enter your password:</td> <td><input type="password" size="10" name="loginPassword"></td> </tr> </table> <p><input type="submit" value="Log in"> </form> </body> </html> There is an include file with the user authentication and session authentication functions <?php function authenticateUser($connection, $username, $password) { // Test the username and password parameters if (!isset($username) || !isset($password)) return false; // Create a digest of the password collected from // the challenge $password_digest = md5(trim($password)); // Formulate the SQL find the user $query = "SELECT password FROM users WHERE user_name = '{$username}' AND password = '{$password_digest}'"; // Execute the query if (!$result = @ mysql_query ($query, $connection)) showerror(); // exactly one row? then we have found the user if (mysql_num_rows($result) != 1) return false; else return true; } // Connects to a session and checks that the user has // authenticated and that the remote IP address matches // the address used to create the session. function sessionAuthenticate() { // Check if the user hasn't logged in if (!isset($_SESSION["loginUsername"])) { // The request does not identify a session $_SESSION["message"] = "You are not authorized to access the URL {$_SERVER["REQUEST_URI"]}"; header("Location: logout.php"); exit; } // Check if the request is from a different IP address to previously if (!isset($_SESSION["loginIP"]) || ($_SESSION["loginIP"] != $_SERVER["REMOTE_ADDR"])) { // The request did not originate from the machine // that was used to create the session. // THIS IS POSSIBLY A SESSION HIJACK ATTEMPT $_SESSION["message"] = "You are not authorized to access the URL {$_SERVER["REQUEST_URI"]} from the address {$_SERVER["REMOTE_ADDR"]}"; header("Location: logout.php"); exit; } } ?> Then if a user CAN authenticate they are supposed to land at the home page of the application: <?php require "authentication.inc"; require_once "HTML/Template/ITX.php"; session_start(); // Connect to an authenticated session or relocate to logout.php sessionAuthenticate(); $template = new HTML_Template_ITX("./templates"); $template->loadTemplatefile("home.tpl", true, true); $template->setVariable("USERNAME", $_SESSION["loginUsername"]); $template->parseCurrentBlock(); $template->show(); ?> This file uses a template file to display it's contents: <?php require "authentication.inc"; require_once "HTML/Template/ITX.php"; session_start(); // Connect to an authenticated session or relocate to logout.php sessionAuthenticate(); $template = new HTML_Template_ITX("./templates"); $template->loadTemplatefile("home.tpl", true, true); $template->setVariable("USERNAME", $_SESSION["loginUsername"]); $template->parseCurrentBlock(); $template->show(); ?> If the user selects the logout page this is what they see. And as I mentioned users are unable to login so they automatically end up here instead of the home page. <?php require_once "HTML/Template/ITX.php"; session_start(); $message = ""; // An authenticated user has logged out -- be polite and thank them for // using your application. if (isset($_SESSION["loginUsername"])) $message .= "Thanks {$_SESSION["loginUsername"]} for using the Application."; // Some script, possibly the setup script, may have set up a // logout message if (isset($_SESSION["message"])) { $message .= $_SESSION["message"]; unset($_SESSION["message"]); } // Destroy the session. session_destroy(); // Display the page (including the message) $template = new HTML_Template_ITX("./templates"); $template->loadTemplatefile("logout.tpl", true, true); $template->setVariable("MESSAGE", $message); $template->parseCurrentBlock(); $template->show(); ?> Logout uses a template file also: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html401/loose.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Logout</title> </head> <body> <h1>Application Logout Page</h1> {MESSAGE} <p>Click <a href="login.html">here</a> to log in. </body> </html> the database is _extremely_ simple by design: mysql> use authentication; Database changed mysql> SHOW TABLES; +--------------------------+ | Tables_in_authentication | +--------------------------+ | users | +--------------------------+ 1 row in set (0.00 sec) > CREATE TABLE users ( -> user_name char(50) NOT NULL, -> password char(32) NOT NULL, -> PRIMARY KEY (user_name), -> ) type=MyISAM; and I added a user to test the app mysql> SELECT * FROM users; +------------+----------+ | user_name | password | +------------+----------+ | bluethundr | secretpass | +------------+----------+ 1 row in set (0.00 sec) but all the user ever sees is this message even tho the correct user name and password are entered: Application Logout Page Could not connect to the application as 'bluethundr' Click here to log in. :'( :'( :'( :'( :'( :'( :'( Can anyone slap me upside the head with the clue-by-four on this one?
  3. bluethundr
    Weird. When I pasted in the debugging code the page worked as it should have and forwarded the user to logout page as it should have and everything displayed. No errors were shown. But I am having a new problem with this mini - application I am trying to write. Users cannot login. When they try to they are automatically sent to a page telling them they are not "authorized". But this is a database access problem and I think I will ask that question in the mysql forum. Also I didn't seem to get any response on the "which books to read" question. Did I ask this question in the wrong forum? Is there another forum that I should have asked it in? Thanks!
  4. bluethundr
    I was wondering what you guys thought of the website I work for. I am their admin not their designer. /http://beezag.com/
  5. bluethundr
    when you surf to the page all you see is a white page with nothing on it. no 404. error reporting is turned on in php.ini and there doesn't appear to be any error in the syntax only the program logic. thanks
  6. bluethundr
    hey guys, I wrote a simple script that is meant to display a home page that relies on a template file. For some reason this isn't working. I was hoping you could help me determine why home.php does not display. Also I wanted to find out which books you felt were best to learn both PHP and MySQL separately. Ideally I would like to treat both topics as separate endeavors before I try to combine them. Which books helped you be the most successful at understanding both? Here are the scripts home.php <?php require "authentication.inc"; require_once "HTML/Template/ITX.php"; session_start(); // Connect to an authenticated session or relocate to logout.php sessionAuthenticate(); $template = new HTML_Template_ITX("./templates"); $template->loadTemplatefile("home.tpl", true, true); $template->setVariable("USERNAME", $_SESSION["loginUsername"]); $template->parseCurrentBlock(); $template->show(); ?> home.tpl <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html401/loose.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Home</title> </head> <body> <h1>Welcome to the application</h1> You are logged on as {USERNAME} <p><a href="password.php">Change Password</a> <p><a href="logout.php">Logout</a> </body> </html> [attachment deleted by admin]
  7. bluethundr
    Hello again. I am doing yet another example from the O'Reilly book "PHP and MySQL" that isn't rendering. I have removed all of the error suppressing '@' symbols in the script and my php.ini file has the following set: error_reporting = E_ALL display_errors = 1 Other scripts work and are able to access my MySQL database. My phpinfo().php script looks to be okay. But this script for some reason renders as blank. <?php require 'db.inc'; require_once "HTML/Template/ITX.php"; function formerror(&$template, $message, &$errors) { $errors = true; $template->setCurrentBlock("error"); $template->setVariable("ERROR", $message); $template->parseCurrentBlock("error"); } if (!($connection = mysql_connect("localhost", "thatguy", "yahright?"))) die("Could not connect to database"); $firstname = mysqlclean($_POST, "firstname", 50, $connection); $surname = mysqlclean($_POST, "surname", 50, $connection); $phone = mysqlclean($_POST, "phone", 20, $connection); $template = new HTML_Template_ITX("./templates"); $template->loadTemplatefile("example.8-10.tpl", true, true); $errors = false; if (empty($firstname)) formerror($template, "The first name field cannot be blank.", $errors); if (empty($surname)) formerror($template, "The surname field cannot be blank.", $errors); if (empty($phone)) formerror($template, "The phone field cannot be blank", $errors); // Now the script has finished the validation, show any errors if ($errors) { $template->show(); exit; } // If we made it here, then the data is valid if (!mysql_select_db("telephone", $connection)) showerror(); // Lock the table $query = "LOCK TABLES phonebook WRITE"; if (!( mysql_query ($query, $connection))) showerror(); // Find the maximum phonebook_id value that's in use $query = "SELECT max(phonebook_id) FROM phonebook"; if (!($result = mysql_query ($query, $connection))) showerror(); $row = mysql_fetch_array($result); // Set the new value for the primary key $phonebook_id = $row["max(phonebook_id)"] + 1; // Insert the new phonebook entry $query = "INSERT INTO phonebook VALUES ({$phonebook_id}, '{$surname}', '{$firstname}', '{$phone}')"; if (!(@ mysql_query ($query, $connection))) showerror(); // Unlock the table $query = "UNLOCK TABLES"; if (!( mysql_query ($query, $connection))) showerror(); // Show the phonebook receipt header("Location: example.8-5.php?status=T&phonebook_id={$phonebook_id}"); ?>
  8. bluethundr
    Thanks, I added the missing equal sign. But for some reason this code is still not rendering. example.8-12.php <?php require 'db.inc'; require_once "HTML/Template/ITX.php"; function formerror(&$template, $message, &$errors) { $errors = true; $template->setCurrentBlock("error"); $template->setVariable("ERROR", $message); $template->parseCurrentBlock("error"); } if (!($connection = mysql_connect("localhost", "thatguy", "yahright?"))) die("Could not connect to database"); $phonebook_id = mysqlclean($_POST, "phonebook_id", 5, $connection); $firstname = mysqlclean($_POST, "firstname", 50, $connection); $surname = mysqlclean($_POST, "surname", 50, $connection); $phone = mysqlclean($_POST, "phone", 20, $connection); $template = new HTML_Template_ITX("./templates"); $template->loadTemplatefile("example.8-10.tpl", true, true); $errors = false; if (empty($firstname)) formerror($template, "The first name field cannot be blank.", $errors); if (empty($surname)) formerror($template, "The surname field cannot be blank.", $errors); if (empty($phone)) formerror($template, "The phone field cannot be blank", $errors); // Now the script has finished the validation, show any errors if ($errors) { $template->show(); exit; } // If we made it here, then the data is valid if (!mysql_select_db("telephone", $connection)) showerror(); // Update the phonebook entry $query = "UPDATE phonebook SET surname = '{$surname}', firstname = '{$firstname}', phone = '{$phone}' WHERE phonebook_id = {$phonebook_id}"; if (!( mysql_query ($query, $connection))) showerror(); // Show the phonebook receipt header("Location: example.8-5.php?status=T&phonebook_id={$phonebook_id}"); ?>
  9. bluethundr
    Occasionally I will write code in php that fails to render ANYTHING on the screen. I have error_reporting E_ALL display_errors = 1 Set in my php.ini file and I have removed the mysql error suppression symbol '@' from my code. And yet when I load the page in my browser....nada! Thanks!
  10. bluethundr
    http://localhost/example.8-4.php?surname=woods&firstname=tiger&phone=5551234 LOL!!! Stay classy, bro!
  11. bluethundr
    Understood. The redirection appears to be part of the exercise. How do I turn off buffering in php.ini? But if I do this will it show the error? Because removing the redirection only showed a blank page. Thanks
  12. bluethundr
    OK, thanks and duly noted. The code has been changed to the following with NO change to the result. Still no detailed error and with the same cryptic error message. example.8-4.php <?php require "db.inc"; // Test for user input if (!empty($_GET["surname"]) && !empty($_GET["firstname"]) && !empty($_GET["phone"])) { if (!($connection = mysql_connect("localhost", "thatguy", "yahright?"))) die("Could not connect to database"); $surname = mysqlclean($_GET, "surname", 50, $connection); $firstname = mysqlclean($_GET, "firstname", 50, $connection); $phone = mysqlclean($_GET, "phone", 20, $connection); if (!mysql_select_db("telephone", $connection)) showerror(); // Insert the new phonebook entry $query = "INSERT INTO phonebook VALUES (NULL, '{$surname}', '{$firstname}', '{$phone}')"; if (mysql_query ($query, $connection)) { header("Location: example.8-5.php?status=T&" . "phonebook_id=". mysql_insert_id($connection)); exit; } else { // the query failed, do some basic error reporting - echo mysql_error(); } } // if empty() header("Location: example.8-5.php?status=F"); ?>
  13. bluethundr
    I am attempting to follow along in an example in a book ("PHP and MySQL" by O'Reilly, ISBN-13: 978-0-596-000543-1). The example's point is to add info from a web form to a database while preventing a reload of the webpage from duplicating the item in that database and assigning the item a unique primary key with the auto_increment feature of MySQL. There is a main php script (example.8-4.php) that calls a second (example.8-5.php) and uses a third template file living in ./templates in the webroot (example.8-6.tpl). I have the directives: error_reporting E_ALL display_errors = 1 set in my php.ini file. I have also removed the error suppression ('@') from the mysql commands in an effort to determine the exact error. However all that happens when I access the example.8-4.php script, is I get an error page displayed that shows me message 'A database error occurred.' It seems that new eyes are needed at this point and any help rendered would be appreciated. example.8-4.php <?php require "db.inc"; // Test for user input if (!empty($_GET["surname"]) && !empty($_GET["firstname"]) && !empty($_GET["phone"])) { if (!($connection = mysql_connect("localhost", "thatguy", "yahright?"))) die("Could not connect to database"); $surname = mysqlclean($_GET, "surname", 50, $connection); $firstname = mysqlclean($_GET, "firstname", 50, $connection); $phone = mysqlclean($_GET, "phone", 20, $connection); if (!mysql_select_db("telephone", $connection)) showerror(); // Insert the new phonebook entry $query = "INSERT INTO phonebook VALUES (NULL, '{$surname}', '{$firstname}', '{$phone}')"; if (@mysql_query ($query, $connection)) { header("Location: example.8-5.php?status=T&" . "phonebook_id=". mysql_insert_id($connection)); exit; } } // if empty() header("Location: example.8-5.php?status=F"); ?> example.8-5.php <?php require "db.inc"; require_once "HTML/Template/ITX.php"; if (!($connection = mysql_connect("localhost", "thatguy", "yahright?"))) die("Could not connect to database"); $status = mysqlclean($_GET, "status", 1, $connection); $template = new HTML_Template_ITX("./templates"); $template->loadTemplatefile("example.8-6.tpl", true, true); switch ($status) { case "T": $phonebook_id = mysqlclean($_GET, "phonebook_id", 5, $connection); if (!empty($phonebook_id)) { if (!mysql_select_db("telephone", $connection)) showerror(); $query = "SELECT * FROM phonebook WHERE phonebook_id = {$phonebook_id}"; if (!($result = @mysql_query ($query, $connection))) showerror(); $row = @ mysql_fetch_array($result); $template->setCurrentBlock("success"); $template->setVariable("SURNAME", $row["surname"]); $template->setVariable("FIRSTNAME", $row["firstname"]); $template->setVariable("PHONE", $row["phone"]); $template->parseCurrentBlock(); break; } case "F": $template->setCurrentBlock("failure"); $template->setVariable("MESSAGE", "A database error occurred."); $template->parseCurrentBlock(); break; default: $template->setCurrentBlock("failure"); $template->setVariable("MESSAGE", "You arrived here unexpectedly."); $template->parseCurrentBlock(); break; } $template->show(); ?> example.8-6.tpl inside of ./templates <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html401/loose.dtd"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <title>Phonebook Entry Receipt</title> </head> <body> <!-- BEGIN success --> <h1>Added a Phonebook Entry</h1> <table> <tr> <td>Surname: <td>{SURNAME} </tr> <tr> <td>First name: <td>{FIRSTNAME} </tr> <tr> <td>Phone number: <td>{PHONE} </tr> </table> <!-- END success --> <!-- BEGIN failure --> <h1>{MESSAGE}</h1> <!-- END failure --> </body> </html> All of this is accessing a VERY simple database called 'telephone' and consists of this one easy table: CREATE TABLE phonebook ( phonebook_id int(6) NOT NULL auto_increment, surname CHAR(50) NOT NULL, firstname CHAR(50) NOT NULL, phone CHAR(20) NOT NULL, PRIMARY_KEY (phonebook_id) ) type=MyISAM;
  14. bluethundr
    Thanks! I ran your version of the code and this is what I got… SELECT * FROM winery WHERE region_id = Error 1064 : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 3 I posted a copy of the database here so you could try it yourself. It's an example database from the publisher of the book I'm reading containing no vital information. http://rapidshare.com/files/310384292/winestore.sql.html MD5: E16368D7CCBABCDC9FAFC9AF70BBAD57
  15. bluethundr
    awesome tip trying it on the command line! this trick will come in very handy. I checked the syntax errors, got rid of them. but now it's reporting an SQL error and I can't seem to find it. would you mind having a look? this is the error I get when I load the page now... Error 1064 : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 2 I checked line 2 and the whole file and I can't find the SQL error. Thanks
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.