Zrakot's Content - Larry Ullman's Book Forums

Registration Form

Zrakot replied to Zrakot's topic in PHP and MySQL for Dynamic Web Sites: Visual QuickPro Guide (4th Edition)

Paul - Thank you. I like the idea of using sessions, and will do research to try to figure out how to do it. Many thanks for your help and quidance. Best wishes. Mary -

Registration Form

Zrakot replied to Zrakot's topic in PHP and MySQL for Dynamic Web Sites: Visual QuickPro Guide (4th Edition)

Paul - I like your approach as it is more secure. Will definitely give it a try. Maybe you can help me with something else... Following a user's successful login - I would like to present he or she with a multi-page form. Upon submitting the multi-page form, the user's input should be stored in his or her mysql record. Can you explain how this can be accomplished? Sessions? Also, I would like for the user to be able to view, change, etc. his or her data input. How do I go about doing that? Many thanks. Mary -

Registration Form

Zrakot replied to Zrakot's topic in PHP and MySQL for Dynamic Web Sites: Visual QuickPro Guide (4th Edition)

All - I have opted to change the code from: require $_SERVER['DOCUMENT_ROOT'] . '../mysqli_connect.php'; to: require ('mysqli_connect.php'); Still can not explain what the problem was, but it is now resolved using the modified code above. If anyone can tell me what the problem was ... it would be very instructive and appreciated. Thank you. Mary -

Registration Form

Zrakot replied to Zrakot's topic in PHP and MySQL for Dynamic Web Sites: Visual QuickPro Guide (4th Edition)

Jonathon - Here is the code I'm using to access mysqli_connect (in Register.php): // Need the database connection: require $_SERVER['DOCUMENT_ROOT'] . '../mysqli_connect.php'; Here, for your reference, is the entire set of code for Register.php: <?php # Script 18.6 - register.php // This is the registration page for the site. require ('includes/config.inc.php'); $page_title = 'Register'; include ('includes/header.html'); if ($_SERVER['REQUEST_METHOD'] == 'POST') { // Handle the form. // Need the database connection: require $_SERVER['DOCUMENT_ROOT'] . '../mysqli_connect.php'; // Trim all the incoming data: $trimmed = array_map('trim', $_POST); // Assume invalid values: $fn = $ln = $e = $p = FALSE; // Check for a first name: if (preg_match ('/^[A-Z \'.-]{2,20}$/i', $trimmed['first_name'])) { $fn = mysqli_real_escape_string ($dbc, $trimmed['first_name']); } else { echo '<p class="error">Please enter your first name!</p>'; } // Check for a last name: if (preg_match ('/^[A-Z \'.-]{2,40}$/i', $trimmed['last_name'])) { $ln = mysqli_real_escape_string ($dbc, $trimmed['last_name']); } else { echo '<p class="error">Please enter your last name!</p>'; } // Check for an email address: if (filter_var($trimmed['email'], FILTER_VALIDATE_EMAIL)) { $e = mysqli_real_escape_string ($dbc, $trimmed['email']); } else { echo '<p class="error">Please enter a valid email address!</p>'; } // Check for a password and match against the confirmed password: if (preg_match ('/^\w{4,20}$/', $trimmed['password1']) ) { if ($trimmed['password1'] == $trimmed['password2']) { $p = mysqli_real_escape_string ($dbc, $trimmed['password1']); } else { echo '<p class="error">Your password did not match the confirmed password!</p>'; } } else { echo '<p class="error">Please enter a valid password!</p>'; } if ($fn && $ln && $e && $p) { // If everything's OK... // Make sure the email address is available: $q = "SELECT user_id FROM users WHERE email='$e'"; $r = mysqli_query ($dbc, $q) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc)); if (mysqli_num_rows($r) == 0) { // Available. // Create the activation code: $a = md5(uniqid(rand(), true)); // Add the user to the database: $q = "INSERT INTO users (email, pass, first_name, last_name, active, registration_date) VALUES ('$e', SHA1('$p'), '$fn', '$ln', '$a', NOW() )"; $r = mysqli_query ($dbc, $q) or trigger_error("Query: $q\n<br />MySQL Error: " . mysqli_error($dbc)); if (mysqli_affected_rows($dbc) == 1) { // If it ran OK. // Send the email: $body = "Thank you for registering at Mysite.net. To activate your account, please click on this link:\n\n"; $body .= BASE_URL . 'activate.php?x=' . urlencode($e) . "&y=$a"; mail($trimmed['email'], 'Registration Confirmation', $body, 'From: admin@mysite.net'); // Finish the page: echo '<h3>Thank you for registering! A confirmation email has been sent to your address. Please click on the link in that email in order to activate your account.</h3>'; include ('includes/footer.html'); // Include the HTML footer. exit(); // Stop the page. } else { // If it did not run OK. echo '<p class="error">You could not be registered due to a system error. We apologize for any inconvenience.</p>'; } } else { // The email address is not available. echo '<p class="error">That email address has already been registered. If you have forgotten your password, use the link at right to have your password sent to you.</p>'; } } else { // If one of the data tests failed. echo '<p class="error">Please try again.</p>'; } mysqli_close($dbc); } // End of the main Submit conditional. ?> <h1>Register</h1> <form action="register.php" method="post"> <fieldset> <p><b>First Name:</b> <input type="text" name="first_name" size="20" maxlength="20" value="<?php if (isset($trimmed['first_name'])) echo $trimmed['first_name']; ?>" /></p> <p><b>Last Name:</b> <input type="text" name="last_name" size="20" maxlength="40" value="<?php if (isset($trimmed['last_name'])) echo $trimmed['last_name']; ?>" /></p> <p><b>Email Address:</b> <input type="text" name="email" size="30" maxlength="60" value="<?php if (isset($trimmed['email'])) echo $trimmed['email']; ?>" /> </p> <p><b>Password:</b> <input type="password" name="password1" size="20" maxlength="20" value="<?php if (isset($trimmed['password1'])) echo $trimmed['password1']; ?>" /> <small>Use only letters, numbers, and the underscore. Must be between 4 and 20 characters long.</small></p> <p><b>Confirm Password:</b> <input type="password" name="password2" size="20" maxlength="20" value="<?php if (isset($trimmed['password2'])) echo $trimmed['password2']; ?>" /></p> </fieldset> <div align="center"><input type="submit" name="submit" value="Register" /></div> </form> <?php include ('includes/footer.html'); ?> Thanks, Jonathon. Mary -

Registration Form

Zrakot replied to Zrakot's topic in PHP and MySQL for Dynamic Web Sites: Visual QuickPro Guide (4th Edition)

Jonathon - Great question. I have no idea why the full stop/period/dot keeps getting inserted! The app is live on a hosted, shared server from 1and1.com. Any thoughts? Thanks. Mary -