Hi Clint
OK hope this is not too much and there are likely to be more errors in it.
Thank you
Andy
<?php
session_start();
session_register('auth');
session_register('logname');
include("simba.inc");
switch (@$do)
{
case "login":
$connection = mysql_connect($host, $user,$password)
or die ("Couldn't connect to server.");
$db = mysql_select_db($database, $connection)
or die ("Couldn't select database.");
$sql = "SELECT username FROM Members
WHERE username='$fusername'";
$result = mysql_query($sql)
or die("Couldn't execute query.");
$num = mysql_num_rows($result);
if ($num == 1) // login name was found {
$sql = "SELECT username FROM Members
WHERE username='$fusername'
AND password=password('$fpassword')";
$result2 = mysql_query($sql)
or die("Couldn't execute query.");
$num2 = mysql_num_rows($result2);
if ($num2 > 0) // password is correct {
$auth="yes";
$logname=$fusername;
$today = date("Y-m-d h:m:s");
$sql = "INSERT INTO Login (username,loginTime)
VALUES ('$logname','$today')";
mysql_query($sql) or die("Can't execute query.");
header("Location: Member_page.php");
}
else // password is not correct
{
unset($do);
$message="The Username, '$fusername' exists,
but you have not entered the correct
password! Please try again.<br>";
include("login_form.inc");
}
}
elseif ($num == 0) // login name not found
{
unset($do);
$message = "The Username you entered does not
exist! Please try again.<br>";
include("login_form.inc");
}
break;
case "new":
foreach($HTTP_POST_VARS as $key => $value)
{
if ($key != "phone")
{
if ($value == "")
{
unset($do);
$message_new = "Required information is missing.
Please try again.";
include("login_form.inc");
exit();
}
}
if (ereg("{company)",$key))
{
if (!ereg("^[A-Za-z' -]{1,50}$",$key))
{
unset($do);
$message_new = "$company is not a valid name.
Please try again.";
include("login_form.inc");
exit();
}
}
if (ereg("{name)",$key))
{
if (!ereg("^[A-Za-z' -]{1,50}$",$key))
{
unset($do);
$message_new = "$name is not a valid name.
Please try again.";
include("login_form.inc");
exit();
}
}
if (ereg("{address)",$key))
{
if (!ereg("^[A-Za-z' -]{1,50}$",$key))
{
unset($do);
$message_new = "$address is not valid.
Please try again.";
include("login_form.inc");
exit();
}
}
if (ereg("{town)",$key))
{
if (!ereg("^[A-Za-z' -]{1,50}$",$key))
{
unset($do);
$message_new = "$town is not a valid town.
Please try again.";
include("login_form.inc");
exit();
}
}
if (ereg("{county)",$key))
{
if (!ereg("^[A-Za-z' -]{1,50}$",$key))
{
unset($do);
$message_new = "$county is not valid.
Please try again.";
include("login_form.inc");
exit();
}
}
$$key = strip_tags(trim($value));
}
if (!ereg("^[0-9]{5,5}(\-[0-9]{4,4})?$",$postcode))
{
unset($do);
$message_new = "$postcode is not a valid postcode.
Please try again.";
include("login_form.inc");
exit();
}
if (!ereg("^[0-9)(xX -]{7,20}$",$phone))
{
unset($do);
$message_new = "$phone is not a valid phone number.
Please try again.";
include("login_form.inc");
exit();
}
}
if (!ereg("[EMAIL PROTECTED]",$email))
{
unset($do);
$message_new = "$email is not a valid email address.
Please try again.";
include("login_form.inc");
exit();
}
/* check to see if login name already exists */
$connection = mysql_connect($host,$user,$password)
or die ("Couldn't connect to server.");
$db = mysql_select_db($database, $connection)
or die ("Couldn't select database.");
$sql = "SELECT username FROM Members
WHERE username='$newname'";
$result = mysql_query($sql)
or die("Couldn't execute query.");
$num = mysql_numrows($result);
if ($num > 0)
{
unset($do);
$message_new = "$newname already used. Select another
username.";
include("login_form.inc");
exit();
}
else
{
$today = time("Y-m-d");
$sql = "INSERT INTO Members
(company,name,address,town,county,postcode,phone,email,username,password,cre
ateDate,) VALUES
('$company', '$name','$address','$town','$county',
'$postcode','$phone','$email','$newname',password('$newpass'),'$today')";
mysql_query($sql);
$auth="yes";
$logname = $newname;
/* send email to new member */
$emess1="A new Member Account has been setup for you. ";
$emess2="Your Username and password are: ";
$emess3="\n\n\t$newname\n\t$newpass\n\n";
$emess4="Thank you for your interest in ASK Support ";
$emess5="at ask-support.co.uk\n\n";
$emess6="If you have any questions or problems, email ";
$emess7="[EMAIL PROTECTED]";
$emess =
$emess1.$emess2.$emess3.$emess4.$emess5.$emess6.emess7;
$ehead="From: [EMAIL PROTECTED]";
$subject = "Your new Member Account from ASK Support";
$mailsend=mail("$email","$subject","$emess","$ehead");
header("Location: New_member.php");
}
break;
default:
include("login_form.inc");
}
?>
"Clint Tredway" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> Please post more of your code. It is difficult for us to help you without
> seeing your code.
>
> Clint
>
> -----Original Message-----
> From: Andy [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, April 01, 2003 8:17 AM
> To: [EMAIL PROTECTED]
> Subject: [PHP] Help needed
>
>
> Hi all
>
> Can someone help?
> I am new to PHP and need some help, i have tried to build a members only
> section to my website but i am finding it very hard.
>
> I get this error when i go to the login page:
>
> Parse error: parse error in /home/.sites/112/site***/web/Members/Login.php
> on line 201
>
> But the only thing on line 201 is:
> default:
>
> I don't understand?
> I get the feeling i will need more help even if someone solves this for me
> :o)
>
> Thank you
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
