tribol

The cookie is set when the user logs into the site using user-cookies.php The second line is supposed to validate that the user is actually a verified user so that it can pull their account details for when they get to the dashboard. arghh.. wish i knew more, i'm one of two developers for this site but the other is in australia... he's the one that put it together

So here is the most recent, it's submitting some info to the db table but not yet grabbing the users cookie to fill in the rest of the information. The other thing is that when it does it submits the password twice and then puts another 40 records in the db without the word? So it's looping like mad (i guess) and still can't grab the users info out of the cookie? (DW shows me an error in the code when I uncomment //if ($validUser==1($_COOKIE['account_id'])) <?php include_once($_SERVER['DOCUMENT_ROOT']."/_core/config.php"); include_once($_SERVER['DOCUMENT_ROOT']."/_core/db-connect.php"); include_once($_SERVER['DOCUMENT_ROOT']."/_core/functions.php"); include_once($_SERVER['DOCUMENT_ROOT']."/_core/user-cookies.php"); ///////////////////////////////////////////////////////////////////////////// //if ($validUser==1($_COOKIE['account_id'])) //function submitParadisePassword($intContestantID, $intVoterID, $strType){ $p2p = array("Password1", "password1"); if (in_array("Password1", $p2p)) { // success! $query_insert="INSERT INTO ".DB_DATABASE.".paradise_password_2010 ( accountID, nickname, firstName, lastName, email, paradisePassword, sentFromUrl, dateSent, dateSentTimestamp, ipAddress ) VALUES ( '".mysql_real_escape_string($_POST['accountID'])."', '".mysql_real_escape_string($_POST['nickname'])."', '".mysql_real_escape_string($_POST['firstName'])."', '".mysql_real_escape_string($_POST['lastName'])."', '".mysql_real_escape_string($_POST['email'])."', '".mysql_real_escape_string($_POST['paradisePassword'])."', '".mysql_real_escape_string($_POST['sentFromUrl'])."', '".date("Y-m-d")."', '".time()."', '".$_SERVER['REMOTE_ADDR']."' ) "; mysql_query($query_insert); header("Location: ".$_POST['sentFromUrl']."?p2p=success"); } else { header("Location: ".$_POST['sentFromUrl']."?p2p=fail"); } if (in_array("password1", $p2p)) { // success! $query_insert="INSERT INTO ".DB_DATABASE.".paradise_password_2010 ( accountID, nickname, firstName, lastName, email, paradisePassword, sentFromUrl, dateSent, dateSentTimestamp, ipAddress ) VALUES ( '".mysql_real_escape_string($_POST['accountID'])."', '".mysql_real_escape_string($_POST['nickname'])."', '".mysql_real_escape_string($_POST['firstName'])."', '".mysql_real_escape_string($_POST['lastName'])."', '".mysql_real_escape_string($_POST['email'])."', '".mysql_real_escape_string($_POST['paradisePassword'])."', '".mysql_real_escape_string($_POST['sentFromUrl'])."', '".date("Y-m-d")."', '".time()."', '".$_SERVER['REMOTE_ADDR']."' ) "; mysql_query($query_insert); header("Location: ".$_POST['sentFromUrl']."?p2p=success"); } else { header("Location: ".$_POST['sentFromUrl']."?p2p=fail"); } //} ?>

Not at all, it's for a contest. People have to find a word in a random place and type it into the textbox on their dashboard on their account page. If it's the right word they get entered into a contest to win a trip.

I have a situation where I need to put a textbox and a submit button on a page. The user is logged in. The script needs to check against a list of words to make sure the word the user entered is correct and if so submit their information(ie:name, email, time, date, word entered to a database table. The part i'm having trouble with is figuring out how to make it check against a specific set of words. <p><strong>Enter Word</strong></p> <form action="/paradisepassword.php" method="post"> <input type="hidden" name="action" value="password2paradise" /> <table cellpadding="5px"> <tr> <td style="padding:3px;"><label for="password2paradise">Enter here::</label></td> <td style="padding:3px;"><input name="password2paradise" type="password2paradise" id="password2paradise" value="" maxlength="30" tabindex="5" /></td> </tr> <tr> <td style="padding:3px;"> </td> <td style="padding:3px;"><input name="submit" type="submit" value="Submit Password" tabindex="7" class="generalButton" /></td> </tr> </table> </form> and the php file to process it: <?php include_once($_SERVER['DOCUMENT_ROOT']."/_core/config.php"); include_once($_SERVER['DOCUMENT_ROOT']."/_core/db-connect.php"); include_once($_SERVER['DOCUMENT_ROOT']."/_core/functions.php"); include_once($_SERVER['DOCUMENT_ROOT']."/_core/user-cookies.php"); ///////////////////////////////////////////////////////////////////////////// //function submitParadisePassword($intContestantID, $intDateSent, $intParadisePassword, $strType){ $paradise_password = paradisePassword("password1", "password2", "password3", "password4", "password5", "password6", "password7", "password8", "password9", "password10"); if (!$paradise_password == paradisePassword); { // success! $query_insert="INSERT INTO ".DB_DATABASE.".paradisepassword_2010 ( accountID, nickname, firstName, lastName, email, paradisePassword, sentFromUrl, dateSent, dateSentTimestamp, ipAddress ) VALUES ( '".mysql_real_escape_string($_POST['accountID'])."', '".mysql_real_escape_string($_POST['nickname'])."', '".mysql_real_escape_string($_POST['firstName'])."', '".mysql_real_escape_string($_POST['lastName'])."', '".mysql_real_escape_string($_POST['email'])."', '".mysql_real_escape_string($_POST['paradisePassword'])."', '".mysql_real_escape_string($_POST['sentFromUrl'])."', '".date("Y-m-d")."', '".time()."', '".$_SERVER['REMOTE_ADDR']."' ) "; mysql_query($query_insert); header("Location: ".$_POST['sentFromUrl']."?p2p=success"); } else { header("Location: ".$_POST['sentFromUrl']."?p2p=fail"); } //} ?> what am i missing?

I figured it out, i had the call for the fourth field all wrong... no, it wasn't ontario.

The first three fields were already there when i started but I wanted to add a fourth. I got this far but it's breaking on me still. It won't call up the last field. Doens't help that I don't know much about it... <?php // functions function pullQuery($strMethod, $sqlSelect, $sqlDatatable, $sqlWhere, $sqlOrder, $output, $outputFieldOne, $outputFieldTwo, $outputFieldThree, $outputFieldFour) { echo $query="$sqlSelect FROM ".DB_DATABASE.".$sqlDatatable $sqlWhere $sqlOrder"; $result=mysql_query($query); while ($rs=mysql_fetch_object($result)) { if ($outputFieldOne) $newoutput=str_replace("#VALUE1#",$rs->$outputFieldOne,$output); if ($outputFieldTwo) $newoutput=str_replace("#VALUE2#",$rs->$outputFieldTwo,$newoutput); if ($outputFieldThree) $newoutput=str_replace("#VALUE3#",$rs->$outputFieldThree,$newoutput); if ($outputFieldFour) $newoutput=str_replace("#VALUE4#",$rs->$outputFieldFour,$newoutput); if ($strMethod=="echo") echo $newoutput; if ($strMethod=="return") return $newoutput; } mysql_query($query); } // if ($_GET['province']) { echo "<select name=\"consultantcity\" onChange=\"ajaxCall('call-data-shops.php?city='+this.value+'','location');\">"; echo "<option value=\"\" selected=\"selected\">- City -</option>"; pullQuery("echo", "SELECT DISTINCT city", "shopData", "WHERE province='".$_GET['province']."' AND shopType='Retail' AND status='Open'", "ORDER BY city ASC", "<option value=\"#VALUE1#\">#VALUE1#</option>\n", "city", "", ""); echo "</select>"; } if ($_GET['city']) { echo "<select name=\"consultantShop\ onChange=\"ajaxCall('call-data-shops.php?city='+this.value+'','consultant');\">"; echo "<option value=\"\" selected=\"selected\">- Location -</option>"; pullQuery("echo", "SELECT *", "shopData", "WHERE city='".$_GET['city']."' AND shopType='Retail' AND status='Open'", "ORDER BY shopName ASC", "<option value=\"#VALUE1#\">#VALUE1#</option>\n", "shopName", "", ""); echo "</select>"; } if ($_GET['location']) { echo "<select name=\"consultantName\ onChange=\"ajaxCall('call-data-shops.php?city='+this.value+'','consultant');\">"; echo "<option value=\"\" selected=\"selected\">- Consultant -</option>"; pullQuery("echo", "SELECT *", "shopStaffDetails", "WHERE firstName='".$_GET['firstName']."' AND lastName='".$_GET['lastName']."' AND shopName='consultantShop' AND status='Open'", "ORDER BY firstName ASC", "<option value=\"#VALUE1#\">#VALUE1#</option>\n", "consultantName", "", ""); echo "</select>"; } ?> and the section of the form: <table width="100%" border="0"> <tr> <td width="49%" align="right" valign="top"><span class="red">*</span> Please select the location that is the most convenient for you: </td> <td width="51%" valign="top"><div style="float:left"> <select name="province" id="province" onChange="ajaxCall('call-data-shops.php?province='+this.value+'','consultantcity')"> <option value="" selected="selected">- Province -</option> <option value="Alberta">Alberta</option> <option value="British Columbia">British Columbia</option> <option value="Nova Scotia">Nova Scotia</option> <option value="Ontario">Ontario</option> </select> <div id="consultantcity" style="padding:5px 0 5px 0"> <select name="consultantcity"> <option value="" selected="selected" disabled="disabled">- City -</option> </select> </div> <div id="location" style="padding:5px 0 5px 0"> <select name="consultantShop" id="consultantShop"> <option value="" selected="selected" disabled="disabled">- Location -</option> </select> </div> <div id="consultant" style="padding:5px 0 5px 0"> <select name="consultantName" id="consultantName"> <option value="" selected="selected" disabled="disabled">- Consultant -</option> </select> </div> </div></td> </tr> <tr> <td> </td> <td> </td> </tr> </table> Any help would be greatly appreciated. Cheers

Okay so I've edited the query's a little: (in functions.php) //team one function totalVotesOne ($intTotalOneVotes) { $query="SELECT SUM(totalvotes) as total_one FROM ".DB_DATABASE.".bonusvotes_2010 WHERE bonusvotes_2010.contestantID= IN ('2093,538') AND bonusvotes_2010.status='Valid'"; $result=mysql_query($query); return mysql_num_rows($result); } //team two function totalVotesTwo ($intTotalTwoVotes) { $query="SELECT SUM(totalvotes) as total_two FROM ".DB_DATABASE.".bonusvotes_2010 WHERE bonusvotes_2010.contestantID= IN ('5449,2888') AND bonusvotes_2010.status='Valid'"; $result=mysql_query($query); return mysql_num_rows($result); } //team three function totalVotesThree ($intTotalThreeVotes) { $query="SELECT SUM(totalvotes) as total_three FROM ".DB_DATABASE.".bonusvotes_2010 WHERE bonusvotes_2010.contestantID= IN ('3460,242') AND bonusvotes_2010.status='Valid'"; $result=mysql_query($query); return mysql_num_rows($result); } and i'm calling the results from my index.php with: Current Total Votes:<?=$totalVotesOne?> Current Total Votes:<?=$totalVotesTwo?> Current Total Votes:<?=$totalVotesThree?> But it's not giving me any results??? Don't get it

Why does it keep returning errors on this line $return mysql_num_rows($result);

i'm just trying to get the SUM of votes of two unique id's per query in one specific table. each contestant has three seperate posts that can be voted on and i figured this would do it, just wondering if it looks right. //team 1 function totalVotesOne ($intTotalOneVotes) { $query="SELECT SUM(totalvotes) as total_one FROM ".DB_DATABASE.".bonusvotes_2010 WHERE bonusvotes_2010.contestantID='2093' AND bonusvotes_2010.contestantID='538' AND bonusvotes_2010.status='Valid'"; $result=mysql_query($query); $return mysql_num_rows($result); } //team two function totalVotesTwo ($intTotalTwoVotes) { $query="SELECT SUM(totalvotes) as total_two FROM ".DB_DATABASE.".bonusvotes_2010 WHERE bonusvotes_2010.contestantID='5449' AND bonusvotes_2010.contestantID='2888' AND bonusvotes_2010.status='Valid'"; $result=mysql_query($query); $return mysql_num_rows($result); } //team three function totalVotesThree ($intTotalThreeVotes) { $query="SELECT SUM(totalvotes) as total_three FROM ".DB_DATABASE.".bonusvotes_2010 WHERE bonusvotes_2010.contestantID='3460' AND bonusvotes_2010.contestantID='242' AND bonusvotes_2010.status='Valid'"; $result=mysql_query($query); $return mysql_num_rows($result); }

Okay, I have a form that pulls records for viewing on one page and editing on another. So on the edit page two of the fields (drop downs) that if left empty delete the existing data from the table. All of the other fields retain they're info though. After searching and asking around someone told me to try : if (is_null($_POST['field'])) { // skip entry } Tried it but likely not properly. It breaks the form (and no i didn't include the {//skip entry} Here is a shortened version of the page i'm editing, the two fields that are updating with null are consultantShop and consultantName -> <?php include("includes/header.php"); $section_db="RegistrationForms"; if ($_POST['action']=="Remove" && $_POST['id']) { $query_update="UPDATE ".DB_DATABASE.".$section_db SET $section_db.active='N' WHERE $section_db.ID='".$_POST['id']."'"; secureSQLReport($query_update); $messagegood="Event removed successfully!<br />"; } else if ($_POST['action']=="edit") { foreach($_POST as $index=>$value) { $_POST[$index]=stripslashes(trim($value)); } if (!$_POST['firstName1']) $error=$error."Missing first name.<br />"; if (!$_POST['lastName1']) $error=$error."Missing last name.<br />"; if (!$_POST['firstName2']) $error=$error."Missing first name.<br />"; if (!$_POST['lastName2']) $error=$error."Missing last name.<br />"; if (!$error) { $query_insert="UPDATE ".DB_DATABASE.".$section_db SET firstName1='".mysql_escape_string($_POST['firstName1'])."', lastName1='".mysql_escape_string($_POST['lastName1'])."', firstName2='".mysql_escape_string($_POST['firstName2'])."', lastName2='".mysql_escape_string($_POST['lastName2'])."', consultantShop='".mysql_escape_string($_POST['consultantShop'])."', consultantName='".mysql_escape_string($_POST['consultantName'])."', active='".mysql_escape_string($_POST['active'])."' WHERE $section_db.ID='".mysql_escape_string($_POST['id'])."' "; secureSQLReport($query_insert); $messagegood="Event successfully updated!"; } } ?><link href="css/admin_style.css" rel="stylesheet" type="text/css"> <div id="edit-<?php echo $section_db; ?>-page" class="mod-container-big"> <?php if ($error) { ?><div class="message-bad"><?php echo $error; ?></div><?php } ?> <?php if ($messagegood) { ?><div class="message-good"><?php echo $messagegood; ?></div><?php } ?> <h1>Edit » Event</h1> <div class="padding10"> <?php if (($_GET['id'] && !$_POST['action']) || ($_POST['id'] && !$_POST['action']) || ($_POST['id'] && $_POST['action']=="edit" && $error) || ($_POST['id'] && $_POST['action']=="edit" && !$error)) { if ($_GET['id']) $id=$_GET['id']; if ($_POST['id']) $id=$_POST['id']; $query="SELECT * FROM ".DB_DATABASE.".$section_db WHERE $section_db.ID='$id'"; $result=mysql_query($query); $record=mysql_fetch_object($result); $firstName1=$record->firstName1; $lastName1=$record->lastName1; $email1=$record->email1; $firstName2=$record->firstName2; $lastName2=$record->lastName2; $email2=$record->email2; $consultantShop=$record->consultantShop; $consultantName=$record->consultantName; $active=$record->active; secureSQLReport($query); if ($error) { $email1=$_POST['email1']; $firstName1=$_POST['firstName1']; $lastName1=$_POST['lastName1']; $email2=$_POST['email2']; $firstName2=$_POST['firstName2']; $lastName2=$_POST['lastName2']; $consultantShop=$_POST['consultantShop']; $consultantName=$_POST['consultantName']; $active=$_POST['active']; } //$consultantShop=(is_null($_POST['consultantShop'])); //$consultantName=(is_null($_POST['consultantName'])); if ($comments==0) $comments="no"; if ($comments==1) $comments="yes"; ?> <p><a href="index.php"><img src="icons/arrow_left.png" alt="Back" border="0" align="absmiddle"></a> <a href="index.php">Back to entries</a> | <a href="<?php echo getenv("REQUEST_URI"); ?>"><img src="icons/arrow_refresh.png" alt="Refresh" border="0" align="absmiddle"></a> <a href="<?php echo getenv("REQUEST_URI"); ?>">Refresh this page</a></p> <form action="<?php echo $_SERVER['PHP_SELF']; ?>?id=<?=$id?>" method="post"> <input type="hidden" name="action" value="edit"> <input type="hidden" name="id" value="<?php echo $id; ?>"> <input type="hidden" name="date_added" value="<?php echo $date_added; ?>"> <table width="650" border="0" cellpadding="5" cellspacing="5"> <tr> <td width="130" valign="top"> </td> <td valign="top"><strong class="required">*</strong> Required fileds</td> </tr> <tr> <td valign="top"><input name="firstName1" type="text" class="medium-length-field" value="<?=$firstName1?>" maxlength="50" id="firstName1" /> <em>maximum 50 characters</em></td> </tr> <tr> <td align="right" valign="top"><strong class="required">*</strong><strong><?=$brideGroomSelection1?>'s Last Name:</strong> </td> <td valign="top"><input name="lastName1" type="text" class="medium-length-field" value="<?=$lastName1?>" maxlength="50" id="lastName1" /> <em>maximum 50 characters</em></td> </tr> <tr> <td align="right" valign="top"><strong class="required">*</strong><strong><?=$brideGroomSelection2?>'s First Name:</strong> </td> <td valign="top"><input name="firstName2" type="text" class="medium-length-field" value="<?=$firstName2?>" maxlength="50" id="firstName3" /> <em>maximum 50 characters</em></td> </tr> <tr> <td valign="top"><input name="lastName2" type="text" class="medium-length-field" value="<?=$lastName2?>" maxlength="50" id="lastName2" /> <em>maximum 50 characters</em></td> </tr> <?php if ($consultantShop) { ?> <tr> <td align="right" valign="top"><strong>Shop Info:</strong> </td> <td valign="top"> <?php $query2="SELECT * FROM ".DB_DATABASE.".shopData WHERE shopName='$record->consultantShop'"; $result2=mysql_query($query2); $record2=mysql_fetch_object($result2); secureSQLReport($query2); ?> <?=$consultantShop?><br /> <?=$record2->address?>, <?=$record2->city?>, <?=$record2->province?> <?=$record2->postalCode?><br /> Phone: <?=$record2->phone?><br /> Toll Free: <?=$record2->tollFree?><br /> Fax: <?=$record2->fax?><br /> Hours: <?=$record2->storeHours?><br /> Pseudo: <?=$record2->pseudo?><br /> </td> </tr> <!--change shop-consultant worked here--> <tr> <td align="right" valign="top"><strong>Consultant Info:</strong> </td> <td valign="top"> <?php if ($consultantName) { $consultantName=explode(" ",$consultantName); $consultantFirst=$consultantName[0]; $consultantLast=$consultantName[1]; $query="SELECT * FROM ".DB_DATABASE.".shopsStaffDetails WHERE firstName LIKE '%$consultantFirst%' AND lastName LIKE '%$consultantLast%'"; $result=mysql_query($query); $record=mysql_fetch_object($result); secureSQLReport($query); if ($record->ID) { $query2="SELECT * FROM ".DB_DATABASE.".shopData WHERE shopName='$record->shopName'"; $result2=mysql_query($query2); $record2=mysql_fetch_object($result2); secureSQLReport($query2); } ?> <?=$consultantFirst?> <?=$consultantLast?> <<a href="mailto:<?=$record->emailAddress?>"><?=$record->emailAddress?></a>><br /> <?=$record->shopName?><br /> <?=$record2->address?>, <?=$record2->city?>, <?=$record2->province?> <?=$record2->postalCode?><br /> Phone: <?=$record2->phone?><br /> Toll Free: <?=$record2->tollFree?><br /> Fax: <?=$record2->fax?><br /> Hours: <?=$record2->storeHours?><br /> Pseudo: <?=$record2->pseudo?><br /> <?php } ?> </td> </tr> <?php } ?> <tr> <td align="right" valign="top"><strong>Change Shop:</strong></td> <td valign="top"><select name="consultantShop" value="<?=$consultantShop?>"> <option></option> <option value="Bank St">(DEBUG) Bank St</option> <option></option> <?php $query="SELECT * FROM ".DB_DATABASE.".shopData WHERE status='Open' AND shopType='Retail' ORDER BY shopName ASC"; $result=mysql_query($query); while ($record=mysql_fetch_object($result)) { ?><option value="<?=$record->shopName?>"><?=$record->shopName?></option><?php } ?> </select></td> </tr> <tr> <td align="right" valign="top"><strong>Change Consultant:</strong></td> <td valign="top"><select name="consultantName" value="<?=$consultantName?>"> <option></option> <option value="me@yahoo.com">(DEBUG) my name <me@yahoo.com></option> <option></option> <?php $query="SELECT * FROM ".DB_DATABASE.".shopsStaffDetails WHERE shopsStaffDetails.active='Y' AND shopsStaffDetails.position='Consultant' OR shopsStaffDetails.position='Team Leader' ORDER BY shopsStaffDetails.firstName ASC"; $result=mysql_query($query); while ($record=mysql_fetch_object($result)) { ?><option value="<?=$record->firstName?> <?=$record->lastName?>"><?=$record->firstName?> <?=$record->lastName?> <<?=$record->emailAddress?>></option><?php } secureSQLReport($query); ?> </select></td> </tr> <tr> <tr> <td align="right" valign="top"><strong>Status:</strong></td> <td valign="top"> <select name="active"> <option value="Active"<?php if ($active=="Active" || $active=="Y") echo " selected=selected";?>>Active</option> <option value="Pending"<?php if ($active=="Pending") echo " selected=selected";?>>Pending</option> <option value="Inactive"<?php if ($active=="Inactive" || $active=="N") echo " selected=selected";?>>Inactive</option> <option value="Closed"<?php if ($active=="Closed") echo " selected=selected";?>>Closed</option> </select> </td> </tr> <tr> <td align="right" valign="top"> </td> <td valign="top"><input type="submit" name="button" id="button" value="Submit" /></td> </tr> </table> </form> <?php } else if ($_POST['id'] && $_POST['action']=="edit" && !$error) { ?> <?php include("includes/action-menu.php"); ?> <?php } ?> </div> </div> <?php include("includes/footer.php"); ?>

I don't believe I didn't pick that up from all the reading i've been doing about it for the last couple days but yeah that's right. I figured it out using strstr($_POST['nickname']," ")==true to check if there were any spaces and returned an error message if there were. thx

Ok, will someone please explain to me why this isn't working??? if (ctype_space($_POST['nickname'])==true) $errors.="- You cannot use spaces in your nickname. Please try again.<br />"; //to use for checking spaces in nickname I've got everything right so far as I can tell, i've gone over it again and again... but for some reason it's not doing anything! grrr..

I understand what you're saying but i'm just maintaining this site, it was built by someone else. I'm getting closer, boiled it down to: if (!$ctype_space['nickname']) $errors.="- You cannot use spaces in your nickname. Please try again.<br />"; Except when i do it this way it brings up the error no matter what, if I remove the ! at the beginning of the statement it doesn't work at all.

Hey all, quick question here. I've created a form and people seem to think that they can submit they're nickname with spaces in it. I've posted the snippet of code below and my edit for the ctype_space is on line 3. My question is will it parse knowing that I'm talking about the nickname since the last line was $check_nickname? or am i missing something... btw $check_nickname is a function passed to mysql and in this case the trim() function won't work since it only checks for spaces in the prefix and suffix. [win] means the nickname has been checked against the database and is good to go. Help? (sorry if i worded it confusingly) if ($check_email) $errors.="- Someone has already registered using that email address<br />"; if ($_POST['win']=="yes" && $check_nickname) $errors.="- Someone has already taken that nickname. Please choose another<br />"; if ($_POST['win']=="yes" && $ctype_space) $errors.="- You cannot use spaces in your nickname. Please try again.<br />"; //to use for checking spaces in nickname if (!$_POST['firstName']) $errors.="- Your first name is required<br />"; if (!$_POST['lastName']) $errors.="- Your last name is required<br />"; if ($_POST['win']=="yes" && !$_POST['nickname']) $errors.="- Your nickname is required<br />"; if (!$_POST['email']) $errors.="- Your email is required<br />"; if (!$_POST['password']) $errors.="- Please senter a password<br />"; if (!$_POST['retype']) $errors.="- Please retype your password<br />"; if ($_POST['password'] && $_POST['retype'] && $_POST['password']!=$_POST['retype']) $errors.="- The passwords you typed do not match<br />"; thx tribol