[PHP] Searching MySQL tables with LIKE

[James, Yz]

Hi Guys,

Just a quick question.  I've been using an sql query like this (using
wildcards):

$sql = "SELECT * FROM table WHERE
$search_criteria LIKE '%$search_input%' ORDER by $search_criteria
ASC";

At the moment, if the search criteria was "First_Name" and the text
($search_criteria) was "ch", the returned query contains any name containing
"ch".  The trouble is, if the name you are after is Chris , you might
get a result like:

id 1 CHris etc etc
id 2 RiCHard etc etc
id 3 CHris etc etc

In other words, it seems to be sorting where the instance of the CH comes in
id number rather than alphabetically.  Is there a way of making the query
(using wildcards or without) if someone types in "a", the list will return
alphabetically with, like:

a
aa
ab
abc
ac
ace
ade

I'd explain more, but I really have to go.  Sorry.  Hope you can help, as
most of you often do :)

James



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] ? for the Reg Ex people

[James, Yz]

look up eregi_replace and preg_replace

www.php.net/quickref.php

Gotta run

J

"Jason Bryner" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I'm making a small script that imports HTML pages and I need to do
> some string replacement. I need to replace add a url to all the 'HREF'
> links and images, but if someone could just give me an example of how
> to replace and append the HREF part, I think I can figure it out. It needs
to
> find all the variations of HREF, such as 'HREF = "', href="', 'href =',
etc.
> So it
> needs to be space and capitalization carefree. THANKS TO ANYONE
> WHO HELPS!!!
>
> Jason Bryner
> [EMAIL PROTECTED]
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] Getting MIME-type of file

[James, Yz]

Yes:

Assuming that then input variable for the file is "file":

like: 

The returned results would be:
$file = the name of the temporary file on the server.

$file_name = The actual name of the file uploaded (ie pic.jpg)

$file_size = the size of the file, in bytes.

$file_type = the MIME type (yay) of the file.

So, if you uploaded a Jpeg to your server, you could echo each of those
variables to get info on them.

You can also specify what files you want / don't want... Something like this
might do it:

$allowed_types = array("image/gif","image/pjpeg","image/jpeg");

if (!in_array($file_type/* Our type of file */,$allowed_types) {
echo "You uploaded $file_name.  Unfortunately, we don't allow files with
the MIME type, $file_type.";
} else {
echo "You uploaded $file_name, which has a MIME type of $file_type.
Your file was $file_size.  Thanks :)";
}

Of course, you will have to do more extensive checking, and write some code
to unlink invalid file types, together with auto-rename if you expect, for
example, a lot of people to be uploading membership details:  If they
include a pic, out of two people uploading a picture, say "tobias.jpg", one
of them is going to be disappointed;  One file will overwrite the other if
put into the same directory :)

Also, you'll probably want to set a maximum files size.

$max_file_size = "102400"; /* in bytes (100Kb in this example) */

if ($file_size > $max_file_size) {
echo "Your file's too big!";
}

Hope this helps.

James.


> After a lot of searching on the mailing list and different resources I
have
> come up with... nothing.
>
> My question:
> Can I get the MIME-type of a file using PHP?
> (image/gif, text/plain, application/octet-stream, ect.)
>
> Thanks,
> // Tobias
>
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] Quick Directory Question

[James, Yz]

You're missing something simple, I think.

/*  Use these variables in each of the pages you need them, or stick them in
a config include */
$files_above_root = "/home/pages/www";
$files_below_root = "/home/pages";

/* reference includes similar to this method */
include("$files_above_root/somethingallshouldsee.php");

include($files_below_root/secret.inc");
or in another subdirectory below the www root:
include("$files_below_root/secret_files/topsecret.inc");

Zap.  That should do it :)

James.

> I can use "$DOCUMENT_ROOT/includes/" to refer to my includes folder if it
> is at the top of my web directory. This works consistently no matter where
> about in the site I call it from.
>
> Is there a similar easy way to refer to a folder that is placed outside
the
> web tree (above the web directory) for security? The only way I seem able
> to do it is using "../../../includes/", for example, which naturally
> depends on how deep in the website I am.
>
> FTFM me if I have missed something built in and obvious.
>
>
> Andy Clarke
>
>
>
>
>  
>Andy Clarke
>   78 West Kensington Court, Edith Villas,
>  London, England  W14 9AB
>
> phone:  44 (0)20 7602 3382
>   mobile:  07947 418177
>
>   Freelance Lingo/PHP Programmer
>
>  [EMAIL PROTECTED]
>  
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] Getting MIME-type of file

[James, Yz]

> Oops, I forgot to mention the most important part...
> I need to get the MIME-type (or something that can identify the
> file-extension) from a file ALREADY on the server, not posted through a
> form.
> I.e. How do I get the MIME-type of "tobias.zip" in my folder?
>
> I already know how to get the MIME-type from a form...
> Thanks for the nice snippets though. They might come in handy in the
future.

Just knocked this together.  It doesn't confirm whether or not the files are
actually valid MIME types (like .zip).  For instance, you could upload a
text files, rename it to .zip and it will list it (if you change the
following $required_types variable I've put in here:

__



Looking MIME types?



Here is a listing of the directory I want to be looking in and all of the
files in it.  If the files are listed below, they're the ones I want to
know.


$MIMEfile";
}

}

?>






Note that this probably isn't the best way to go about things, but I've had
a quick root through the file() functions, and could find nothing (though I
didn't look too hard) quick and easy.

Have fun.
James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] radiobutton

[James, Yz]

If someone's updating a form, and I want their last settings to appear in a
the correct radio button, I use this:

>
>

So, on a form with a Radio button asking which you prefer, the one that
they've voted for before is the default button to be checked.

Oh, and I know that's probably messy :)

If you want to get the results, you'd print

The user liked !

James.



Hello,
I have sometging like this:
">Opt1

how I know if some user choose some radiobutton???
I tried if($opt1) , but without success

T.Y.

Miguel Loureiro <[EMAIL PROTECTED] >




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] security help

[James, Yz]

Make sure that the .htpasswd file is BELOW the public files root.  That way,
it can't be accessed through a browser, unless the person who has written
the file to try and read the .htpasswd has uploaded their file to the server
it resides on, and has permission to access that low level directory.  They
can't read files in a directory route, unless they're in the directory:  So
a URL reference won't work.  If you've uploaded the .htpasswd to /www/admin
They could do an include for:

http://www.yoursite.com/admin/.htpasswd);
?>

..So:

/home/myfiles/.htpasswd

Rather than

/home/myfiles/publicwwwfiles/.htpasswd

Hope that's of some use to you.
James.

""Thor M. Steindorsson"" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Should this be possible?
> I know this isn't an issue with php, but since I used php to do this, I
> figured maybe someone here has encountered the same thing, and knows how
to
> help.
> Is this something that can be fixed by making some changes on the linux
> server?
>
> By using this:
>
>  echo "";
> include("/home/someuser/www/admin/.htaccess");
> echo "";
> ?>
>
> I can see what .htpasswd file is used, and then I can simply change the
code
> to display that particular password file, then take the encrypted
password,
> and decrypt it to gain access to that protected area.
>
> I have a feeling this is a permissions issue on the Linux server...
> Can anyone point me in the right direction with this?
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] security help

[James, Yz]

In addition,

(if using .htaccess) They would only be able to read the .htpasswd from
public directory if they had first authorised themselves.  The browser will
prompt them to identify before it allows files from a protected directory to
be included.

J.

> Make sure that the .htpasswd file is BELOW the public files root.  That
way,
> it can't be accessed through a browser, unless the person who has written
> the file to try and read the .htpasswd has uploaded their file to the
server
> it resides on, and has permission to access that low level directory.
They
> can't read files in a directory route, unless they're in the directory:
So
> a URL reference won't work.  If you've uploaded the .htpasswd to
/www/admin
> They could do an include for:
>
>  include(http://www.yoursite.com/admin/.htpasswd);
> ?>
>
> ..So:
>
> /home/myfiles/.htpasswd
>
> Rather than
>
> /home/myfiles/publicwwwfiles/.htpasswd
>
> Hope that's of some use to you.
> James.
>
> ""Thor M. Steindorsson"" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Should this be possible?
> > I know this isn't an issue with php, but since I used php to do this, I
> > figured maybe someone here has encountered the same thing, and knows how
> to
> > help.
> > Is this something that can be fixed by making some changes on the linux
> > server?
> >
> > By using this:
> >
> >  > echo "";
> > include("/home/someuser/www/admin/.htaccess");
> > echo "";
> > ?>
> >
> > I can see what .htpasswd file is used, and then I can simply change the
> code
> > to display that particular password file, then take the encrypted
> password,
> > and decrypt it to gain access to that protected area.
> >
> > I have a feeling this is a permissions issue on the Linux server...
> > Can anyone point me in the right direction with this?
> >
> >
> > --
> > PHP General Mailing List (http://www.php.net/)
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > To contact the list administrators, e-mail: [EMAIL PROTECTED]
> >
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] To The Hacker: CodeBoy

[James, Yz]

Many hackers now go about their business to notify (or even test)
administrators whether or not they've been up to no good.  It's possible
that you've mis-construed what he was up to.

Nevertheless, your complaints should really go to the correct authorities
(your server, the "hacker" and if necessary, beyond that), as opposed to
questions, which might include "I've got a security problem with PHP, what
can I do about it?"

James.

> The hackers name is Jonathan Sharp.  He is a
> regular member of this mailing list.  I do
> believe that people here would like to know they
> have a hacker on their hands, don't you think?
> It would appear the friendly Jonathan has another
> side to himself...
>
> Codeboy:
> Jonathan Sharp
> Director of Technology - Imprev Inc.
> Renwick Development Group - Flyerware
> [EMAIL PROTECTED]
>
>
>
> --- James Moore <[EMAIL PROTECTED]> wrote:
> >
> > >
> > > Today I noticed an entry in my database with
> > the
> > > username "codeboy" and the password "hacked"
> > in
> > > one of the authorization tables I have
> > created.
> > > I am shocked that someone could be so
> > malicious
> > > and insensitive!  I am programming locally; I
> > > realize there may be some security
> > > vulnerabilities during this time, but when I
> > go
> > > live with my network this will not be the
> > case.
> > > If any further attempts are made to hack into
> > my
> > > system I will clearly take the time to
> > retaliate
> > > against you.  Let this be your only warning.
> > >
> >
> > This is not the place to take these issues up.
> > Please email privatly and
> > complain to the appropriate authrities, the
> > PHP-General list is not the
> > place for this.
> >
> > James
> > --
> > James Moore
> > PHP QA Team
> > [EMAIL PROTECTED]
> >
>
>
> =
> =
>  [ rswfire ]
>
>   http://rswfire.swifte.net/
>   http://profiles.yahoo.com/rswfire
>
> =
>
> __
> Do You Yahoo!?
> Get personalized email addresses from Yahoo! Mail - only $35
> a year!  http://personal.mail.yahoo.com/
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] [Newbie] PHP Variables

[James, Yz]

// Index.php file.

//  Page header



// Page footer

...  Difficult to tell what's going wrong with just a url.

James.

> I thought you can pass variables in PHP as in CGI.
>
> http://www.xy.com/index.php?contents=HOME
>
> contents should be available as variable, but it does not seem to work.
Doe
> anyone has an idea why not?



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] security help

[James, Yz]

> > In addition,
> >
> > (if using .htaccess) They would only be able to read the .htpasswd from
> > public directory if they had first authorised themselves.  The browser
will
> > prompt them to identify before it allows files from a protected
directory to
> > be included.
> >
>
> James,
>
> are you sure about this? Afaik, no user authentication applies to PHP
> include() calls. This would require PHP to integrate much closer with
> Apache than I think it does (and makes sense).

Hi Ben,

I'm not positive, (btw, what does Afaik mean?), but I'd assume any request
to files that are inside a directory that has an htaccess file would be
ignored by anything until the username and password have been included (I've
used a PHP include on files before, which refer to files such as jpegs and
gifs that reside in a protected directory, and I've run into the problem of
having to authenticate before the images are displayed).

There's a good chance I'm wrong, but I'll be sure to double check tomorrow
morning.

On another note, I seem to have problems with opendir() and readdir() (which
one of the two I'm not sure).  A simple script I've written will list all
files in a directory I specify on one server, yet the same script (with the
document root changed accordingly) will return  nothing with the other.
Both servers are running the same version of PHP (4.02).  It's probably
something simple I've missed, though I'm sure that the CHMOD settings are
the same, and I'm getting no script errors.  Any ideas?

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] ftp_fput

[James, Yz]

I've no idea what's wrong with this, and I'm a little tired to try and look
into it, but omit any username / password / server info from anything you
post anywhere that's accessible publicly! ;)

James.

""Marisol Díaz E."" <[EMAIL PROTECTED]> wrote in message
008301c09225$4ce07e80$[EMAIL PROTECTED]">news:008301c09225$4ce07e80$[EMAIL PROTECTED]...
Hi

Please help me

I don't knowk that is wrong, in this code, for ftp_fput
Don't copy the archive, when copy the archive , this has other extension,
and the size is 0kb.





Thanks.

Marisol Díaz E.




Marisol Díaz E.
Gerente de Aplicaciones Internet
Tecnopro Cía. Ltda. www.tecnopro.net
Pinta 236 y Rabida Edf. Alcatel of. 301
(593-2)508-722





-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] To The Hacker: CodeBoy

[James, Yz]

> > Whatever, James.
>
> Also, consider this word :
>
> sue
>
> As well as :
>
> defamation of character
>
> And also   :
>
> Libel and Slander
>
> And lastly :
>
> Spoof
>
> All should be considered before posting anything anywhere.  Especially a
> public mailing list.  It's important to be careful with this sort of
> thing, even if it's blindingly true ...

True, but none of which are applicable to me, as I've not slandered, defamed
or spoofed anything or anyone.  As far as hacking is concerned, I wouldn't
know my arse from my elbow :)

James



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] To The Hacker: CodeBoy

[James, Yz]

> Your momma pays full commission!
>
> (sorry, couldn't resist)

It's OK, I get referral fees :)



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] returning multiple variables from a function?

[James, Yz]

Hrms.  Got a small problem.

I'm now using functions on a regular basis, but I've come to another
sticking point with them:  returning multiple variables from the function...

Here's a really quick example (nothing to do with what I intend to use the
functions for):

function CUP ($connection,$username,$password) {

if (($username) && ($password)) {
$sql = "SELECT username, password FROM table
WHERE username = '$username' AND password = '$password'";
$result = etc etc
$num = mysql_numrows($result);

if ($num != 0) {
$valid = "yes";
}

return $valid;

}



$correct_user = CUP ($connection,$username,$password);

Now, if the user is correct, I'd get a return of

$correct_user = "yes";

What if I wanted to "return" more than one variable from the function?  And
how would I assign it a name?  Like the actual variable, or is that just not
possible?

I've tried
return $var1,$var2;
But got an error.

As always, tia :)

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] case sensitivity checking?

[James, Yz]

Hi Guys,

Just a quick question.  If I have a user database, with joe_bloggs as a
user, what would I need to do to make sure that his login details matched
the case sensitivity in a MySQL database?  Say if he logged in as
JOE_BLOGGS, could I return an error?  I'm guessing this is going to turn
into some complicated regex that mashes my brain.

Oh, another thing.  Anyone know of any tools like PHP MyAdmin for
PostGresSQL ?

Thanks,
James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] case sensitivity checking?

[James, Yz]

> make the login field BINARY.

Thanks! ;)

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Finding the? in $REQUEST_URI?page=blah

[James, Yz]

I really wouldn't ask this if I wasn't completely exausted, but the last
thing I feel like doing just now is reading up on this when someone can
probably answer it in a matter of seconds.

OK, I've an error handling page.  Basically, I want to split (that might
even be one of the functions I'll have to use) this sort of url:

error.php?/pages/login.php?username=name

into:

/pages/login.php

I'm using :

header("location: error.php?page=$REQUEST_URI");

When echoing the request_uri back on the error page, it omits the error.php?
bit, so I get:

login.php?username=name

The reason I want to do this is so that I can use a re-login form that will
submit to the page the user has badly logged into, so if they logged in to
main.php, the request_uri would be something like:

/pages/main.php?username=name

Which I'd want to rebuild on the error page, into a form, like:

">
Username: 
etc

Can anyone help?

Thankees :)

James.




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] splitting up contents of a test box

[James, Yz]

If each of the scrolling lines is separated by something regular, like a
carriage return, or a line break, tab (etc), you could use explode(); and
have the values returned as an array.

James.

> I have a form that contains a scrolling text box.  When I display the
> contents of the text box, say in variable $form[mytextbox], it displays
> all on one line (or wraps at end of line).  As the ending character of
> each line will vary, does anyone know of away to split the lines up so
> that I can display the text box contents line by line?
>
> Thanks,
> Don
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Simple REGEX?

[James, Yz]

Hi guys,

I'd like to restrict the characters a client is inputting to a database.

I already have a system that'll exclude certain characters.  Alpha Numerics
are permitted, together with the underscore and spaces.  Is there a
collective expression for the following characters? :

!",.?@()

Because I'd like to allow those too.  And I'm useless with RegEx.

Thanks as always,
James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] How to delete session variables

[James, Yz]

I thought that session variables (unless set to cookie as well) WERE
destroyed at the end of a session?  As in when the user closes the browser?

Hrms.  Maybe not.

Anyway, don't know about when the window is closed, but you could have a
log-out page that uses session_destroy();

James.


> I would like the session variable to be deleted when the user closes their
> browser. Any ideas on how this is done.
>
>
> Ryan Conover
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Maximum queries from a database?

[James, Yz]

Hi all,

I'm a little concerned as to how many times some of the scripts I've been
working on are querying a database:  Some are making up to 4 or 5 queries
each.  Should this give me any cause for concern?

I've only ever been unable to connect to the database once (other than
through script error), and that's when I was using a persistent connection.
So, I guess my question is, is there a recommended maximum number of queries
I should be working around? (MySQL).

Thanks,
James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Table looking odd as a result of while loop?

[James, Yz]

Hi all,  This is probably something dumb I'm missing, but I am using the
following code:

echo "\n";

echo "\n";
$photocount = 0;

while($row = mysql_fetch_array($result)) {
 $smallpic = $row['smallpic'];

 if (($photocount % 3) == 2) {
 echo "\n\n";
 }

 echo "$smallpic\n";
 $photocount++;

 }

echo "\n";

echo "";

and it's outputting a table like this:



sm982438092.gif
sm982437452.gif


sm982439016.gif
sm982529915.gif
sm983222652.gif


sm983222686.gif
sm983222868.gif
sm983222919.gif



(There are currently 8 pics that have been uploaded).  As you can see that
the first row has returned just two columns.  I'd like the photos to be
displayed in rows of three, and if there are only 8 pictures (or any othe
number that's not directly divisible by three) to be displayed on the last
row.   At the moment it's doing it "upside down."  Any ideas?

And I know, I'm going to have to force an extra cell for it to display
correctly


Thanks as always,
James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] while loop and modulus?

[James, Yz]

OK, using this code:

\n";
echo "\n";

$photocount = 0;

while($row = mysql_fetch_array($result)) {
 $smallpic = $row['smallpic'];

 echo "$smallpic\n";

 if (($photocount % 3) == 2) {
 echo "\n\n";
 }
 $photocount++;

 }

echo "\n";
echo "";

?>

And 8 photos in the table, I'm getting this output:



sm982438092.gif
sm982437452.gif
sm982439016.gif


sm982529915.gif
sm983222652.gif
sm983222686.gif


sm983222868.gif
sm983222919.gif



Great, except it's missing an end cell, and after a few hours fiddling about
with code last night, I still didn't get any further in working out how I
was going to echo a table cell even if data's missing.  So, any help would
be appreciated.

Apologies for what're probably "easy" questions.  I slog away at work all
day, come back hoping to get something productive done on this, and the
ol'brain won't take it.  Frustrating, to say the least.

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Two little questions

[James, Yz]

OK, this will be laughably easy for you guys.

I want to write a function (until now, I have been heavily repeating code,
but it's time to trim everything down.)

The function basically needs to check that username and password have been
entered, and then check them against mysql data.  All I am unsure of is the
format for the function...  is it like this:

function CUP (
if ((!$alias) || (!$password)) {
header("Location: login.php");
exit;
}
);

And reference it later with CUP(); ?  Don't worry about the MySQL side of
things, I just need to know how to lay out the function.  Oh and if I can
put anything I want in the function.

Also, if I wanted to perform a search of a column in a mysql table for
"places", would the Syntax be something like this:

$sql = " SELECT * FROM table_name
WHERE place = LIKE \"$searched_word\" ";

?

Thanks in Advance,

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] Two little questions

[James, Yz]

> Then you must 'get' the global variables (like $name):
>
> $name = "mOrP";
>
> function print_name()
> {
> global $name;
> echo $name;
> }
>
> print_name();
>
>
> But it's better to work with the function arguments:
>
> $name = "mOrP"
>
> function print_name($name_arg)
> {
> echo $name_arg;
> }
>
> print_name($name);

Ah, I see, so would something like this work:

$alias = "James";
$password = "MyPassword";

function check_alias_password($alias_arg, $password_arg)
{
if ((!$alias_arg) || (!$password_arg)) {
header("Location: login.php");
exit;
}
}

check_alias_password($alias, $password);

or

function check_alias_password()
global $alias, $password;
{
if ((!$alias) || (!$password)) {
header("Location: login.php");
exit;
}
}

check_alias_password();

work? Or would the last example need to be globals (variables) instead of
global?

> Hope it helps,

It does, and your help is greatly appreciated ;)

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Searching a MySQL database?

[James, Yz]

Can anyone tell me what I would use to query a MySQL database in a search?

If the search field, was for example, a variable like "town", would the
results page use something like this? :

$sql = " SELECT * FROM table_name
WHERE towns = \"$town\" ";

I remember seeing someone post something like this:

$sql = " SELECT * FROM table_name
WHERE towns LIKE \"$town\" ";

so if the search word is not EXACTLY like a row in the database, it may
return results to partial words.

Thanks in advance,

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Another q, this time eregi_replace

[James, Yz]

I'd like to be able to trim out some html tags, but only certain ones.  I've
used eregi_replace before and have some replacements running on some
scripts...

Some of the help pages and user notes on the quick reference functions have
given me good examples of how to go about it.  One thing I'm interested in,
though, is the syntax that's used to determine what the link URL is and the
link name...  I think I saw it as:

//0 for the URL and then //1 for the link.  Like this (poor code, I
dunno whether I've even got the right delimiters):

eregi_replace("///1/\","//1",$string);

I'd like to strip out everything but the link name, so if someone inputs:

http://www.php.net">PHP!

It replaces it with:

PHP!

Thanks, again.  I seem to be asking a lot of questions today, hehe ;)

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] Searching a MySQL database?

[James, Yz]

> You've basically got it... the advantage of LIKE is that you can add
> wildcards to specify what can be different...
>
> towns = '$town'
> ...and...
> towns LIKE '$town'
>
> ...are essentially the same without the % wildcard character. Thus,
>
> towns = '$town'
> ...is much different than...
> towns LIKE '%$town%'

How different are they?  I'm not even sure what a wildcard is?

And thanks ;)

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] Another q, this time eregi_replace

[James, Yz]

Sweet!  Thanks ;)

> > I'd like to strip out everything but the link name, so if someone
inputs:
> >
> > http://www.php.net">PHP!
> >
> > It replaces it with:
> >
> > PHP!
> >
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] Searching a MySQL database?

[James, Yz]

> Here are some queries of the above table with their results
> bases='Ft. Worth' returns record 1
> bases LIKE '%Worth%' returns record 1
> bases LIKE '%Ft.%' returns 1 & 2
> bases LIKE '%' returns all records (in this case, 1 & 2)
>
> See?

That makes perfect sense.  Thank you!



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Basic SQL syntax

[James, Yz]

OK, I got a simple search page working (thanks to all of you who helped me).

Another simple question for you.  If I had a search  and the data to be
searched needs to be determined by check boxes, How would I write the sql>?
Like this?

$sql = "SELECT * FROM table
  WHERE town LIKE '%$search_data%' OR street LIKE '%$search_data%' ";

Is "OR" even the correct syntax?  Here's how I tried it, which didn't give
any results.

(Where reference is the id number (or map reference) and search_data is the
text field for users to tpye the query.

if ($reference != "")
$search_reference = "OR id LIKE '%$reference%'";
}

$sql = "SELECT * FROM table
  WHERE town LIKE '%$search_data%' $search_reference";

$result = @mysql_query($sql,$connection)
 or die (mysql_error());

$num = mysql_num_rows($result);


TIA,
James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] Basic SQL syntax

[James, Yz]

""Johannes Janson"" <[EMAIL PROTECTED]> wrote in message
93vs9u$osj$[EMAIL PROTECTED]">news:93vs9u$osj$[EMAIL PROTECTED]...
> try this:
> $sql = "SELECT * FROM table
>   WHERE town LIKE '%$search_data%' ";
>
> if ($reference != "")
>   $sql .= "OR whatever";


Ah, so you can constantiate (right word?) the query?

Cool, Thanks ;)

James.




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] Basic SQL syntax

[James, Yz]

> > Ah, so you can constantiate (right word?) the query?
>
> I don't know what you mean by 'constantiate', but glad to hear it worked

It did, thank you ;)

Someone pointed out where I'd gone wrong with the word privately:

>> Ah, so you can constantiate (right word?) the query?

> concatenate :)




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] password()

[James, Yz]

Have a look at the base64_encode / decode stuff.  I stumbled across an
example there just this afternoon.

It's available in the user contributed notes of the Quick Reference section
for those functions at http://www.php.net


James.


""Jason Jacobs"" <[EMAIL PROTECTED]> wrote in message
011501c07f3f$c415bcc0$5800a8c0@doc">news:011501c07f3f$c415bcc0$5800a8c0@doc...
> Hi.  I use password() to excrypt my passwords when I'm adding users to my
> mysql database.  I'm wondering if there's a function to use to un-encrypt
it
> (for a web interface to change the password, and so the admin who is
editing
> user info can see what it is).  Thanks for any help.
>
> Jason
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] How to escape from a function?

[James, Yz]

> And I have one more question, what is the meaning of 'or'?
> e.g.
> $db=mysql_connect("localhost","root","password") or die ("could not
> connect");

One more thing, which is important to me as a newbie (as I most certainly
am), you can make a custom error message for the die error; which is
important to me seeing as it happens a lot ;)

if you want to see what the error is (for use with MySQL), use

or die (mysql_error());

or use a message which will display nicely to users, if you're re-writing
something which is already online and in use (not recommended).

$error = "\n\nWe encountered an
error!\n\n\n";

$error .= "\n";

$error .= "We encountered an error!  Please go back to our http://www.site.com\">site!\n\n";

$error .= "\n";

$error .= "";

Then, you would use something like:

 $connection = mysql_connect("localhost","username","password")
or die ($error);

If this is blatantly obvious to you, please ignore it, but at one time not
too long ago, it was helpful to me.  There's probably a lot neater way of
doing things too ;)

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Outputting specific HTML for tag.

[James, Yz]

Hey all.  well, here's (probably) an easy question from me again (surprise
surprise).

Here goes:  I'm putting together a photo gallery for some friends of mine
who own a nightclub, and who want to update photos themselves. I know
there are scripts available to do the job, but I'd like to have a go at my
own.

Most of the stuff I can handle, but I just need to know what code I might
use for returning table cells correctly.  Let's say, for example, there are
5 photos that need returning to one of the photo pages, and I have the
photos in rows of three;  Obviously, there'd be an empty table cell.  And
I'm not sure exactly how I get the results back into rows correctly
anyway...  Bullet points and whole table rows are fine, but table cells?
Hrms.

Anyway, here's how I might've started writing the code, if I hadn't realised
I should ask for help first ;) :

";

while($row = mysql_fetch_array($result)) {

$row = $photo['photo'];

$table .= "$photo"
$table .= "$photo";

}

$table .= "";

//  End Crap programming.

?>

So.  Any takers?  :)

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Importing MS Access into MySQL?

[James, Yz]

Hey all,

I heard somewhere (I think) that it's possible to import a Microsoft Access
file (when saved as a delimited text file) into a MySQL table  Just
wondering whether or not this is true, and if it is, where I might find a
tutorial / some literature on how I might go about doing it.

Thanks, as always, in advance :)

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] void function();

[James, Yz]

Hi there all,

Very dumb question  I just read one of the quickref functions, and the
in-built function is referenced as being :

void function(integer);

What does the void mean?  And how would I use the function?  I just get a
parse error when I use the function with the "void" in it and the "called to
undefined function" (even with an integer) when I omit the "void."

I'm not completely brain dead as to not understand what  the word "void"
means, but the more I'm reading through things, the more confused and sorry
for myself I'm getting ;)  I just guess I could do with having it explained
to me in plain English.

Thanks in advance,

James.







-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Variables within functions, out?

[James, Yz]

Hey guys.  Can I firstly say, thanks to all of you who helped me out with my
last question about importing MS Access databases into MySQL...  It helped
tons!

However, I have another question.

Firstly, I've strayed away from writing many of my own functions, because
they give me the fear.  But the code on the pages I am creating has forced
me to wake up...  I really sould think about cutting back on code.

SO, anyway, to cut to the chase, my question is this:  If I write a
function, which performs checks and assigns variable based on these checks,
how do I get the assigned variables from within the function?  For example
(this is more than likely VERY wrong), something like this:

global.inc:



File that would update / insert information to a MySQL database:



Even when I KNOW that I have included correct values, the $birthday variable
never shows up outside the function.  It's probably something simple I'm
missing, as in most cases ;)

Thanks for your patience,

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] Retrieve HTML page

[James, Yz]

In addition to what's been mentioned, check out the :

readfile, fread and fgets functions...

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] PHP Hosting

[James, Yz]

I believe http://www.f2s.com allow you to use PHP and provide you with a
MySQL database.

James.

> Can anyone receommend free MySQL hosting with PHP. Or if you can find such
a
> hosting on NT, that would be nice.




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Querying MySQL using 'AND' / 'OR'

[James, Yz]

Hi Guys,

Quick question..  I've managed to write a function (thanks to help from
people earlier in the week) which queries an admin table.

There are currently four fields in the table;  id, username, password, and
'site', where the 'site' means a subdirectory of my site that the particular
admin user is allowed acces to change things in

Now, each 'site' user is allowed access to only their site, but, being the
owner of all the 'sites', my field contains the word "all."  So, I used this
to determine whether the user (when logged in) is firstly an administrator,
and secondly what area of the site they're responsible for:

$sql = "SELECT * FROM table
WHERE username = '$username' AND password = '$password' AND site =
'theirsite' OR site = 'all'";

Now, as you can probably see, the table is querying whether the table has a
row with fields:

username, password, site OR

Just a row with the field containing "all."

So, without writing some if statements, is there any way of rewriting that
$sql check so that it checks whether the user is an admin of either the
individual subdirectory, or all of the sites?  Like

username: foo  password: bar site: all

or

username: foo  password: bar site: subdirectory

.  Hope that makes sense, and thanks in advance for any help :)

James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Automating tasks in PHP?

[James, Yz]

Hi all.  This is, what might turn out to be a stupid question  But I'll
ask it anyway ;)

Is there any way of automating tasks in php scripts, WITHOUT having them
open?  Ie, having some method or other to send out an email automatically,
once a week, as a newsletter, based on data / criteria from a database?

Thanks for your patience,
James.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] htaccess

[James, Yz]

This is a good one:

http://www.zend.com/zend/tut/authentication.php

James.

> there was a really good .htaccess tutorial posted to the list a while
> back...anyone remember the address?
>
> ~kurth
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> To contact the list administrators, e-mail: [EMAIL PROTECTED]
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] Problems with string replacement

[James, Yz]

Hello all,

Well, I'm having problems again.  This time with string replacement.  I'd
like people to be able to write notes on one of the site's I'm helping with,
and would like them to be able to use Bold, Italic, Underline and 
tags.  I tried using striptags(); but that would strip anything within
double quotes too.  So I've gotten around it by converting the message
string to htmlspecialchars and then using ereg_replace around the tags I'd
like to allow, ie:

$message = ereg_replace("","", $message);

Where I'm struggling is with the a href tags, though.  I've been using this:

$message = eregi_replace("()(.*)(<\/a>)", "\\4", $message);

which would change a string containing:
http://www.php.net">PHP!
to:
http://www.php.net" target="_blank">PHP!

Great.  But, there's a problem.  If someone uses:
http://www.php.net" target="_blank">PHP!http://www.php.net" target="_blank">PHP Again!
it returns:
http://www.php.net" target="_blank">PHP!/a>