giantsfan24

April 5, 2012

In looking at the code to create the get_shopping_cart/wish_list_contents Stored Procedure, it seams the section for the coffee does not have the phrase "as sku" after the CONCAT. I'm not even sure how you would access that value without the "as sku" command in a statement containing $row[]. Please let me know if this was deliberate or a typo.

On further research, a number of stored procedures do this. If you're not setting the CONCAT("C",sc_id) to anything, how would you access it. The same goes for the CONCAT WS right below it. It's not set to "name". Thanks in advance for your explanation and thank you for all your work, turning geek into English:)

March 4, 2012

OK, I think we all need to smack ourselves on the back of the head. All three of us missed the most obvious thing:

if (mysqli_affected_rows($dbc) == 1) {

In both of our codes, the second database query was NOT run before this function was called. You simply left it out, while I put it AFTER the function. So, of course there were no affected rows since the INSERT INTO statement was never run prior.

March 4, 2012

I'm having the same problem. What exactly about the VARBINARY setting for the password column is causing the error? I read the part of the mysql manual you pointed to and the only thing I could think of is that the VARBINARY setting was taking out space.

"There is no trailing-space removal for BLOB and TEXT columns when values are stored or retrieved. Before MySQL 5.0.3, this differs from VARBINARY and VARCHAR, for which trailing spaces are removed when values are stored."

Even after setting the password column to blob, I got this error:

Here is my php code:

<?php
// This is the registration page for the site.
// This file both displays and processes the registration form.
// This script is begun in Chapter 4.
// Require the configuration before any PHP code as the configuration controls error reporting:
require ('includes/config.inc.php');
// The config file also starts the session.
// Include the header file:
$page_title = 'Register';
include ('includes/header.php');
// Require the database connection:
require (MYSQL);
// For storing registration errors:
$reg_errors = array();
// Check for a form submission:
if ($_SERVER['REQUEST_METHOD'] == 'POST') {

// Check for a first name:
if (preg_match ('/^[A-Z \'.-]{2,20}$/i', $_POST['first_name'])) {
 $fn = mysqli_real_escape_string($dbc, $_POST['first_name']);
} else {
 $reg_errors['first_name'] = 'Please enter your first name!';
}

// Check for a last name:
if (preg_match ('/^[A-Z \'.-]{2,40}$/i', $_POST['last_name'])) {
 $ln = mysqli_real_escape_string ($dbc, $_POST['last_name']);
} else {
 $reg_errors['last_name'] = 'Please enter your last name!';
}

// Check for a username:
if (preg_match ('/^[A-Z0-9]{2,30}$/i', $_POST['username'])) {
 $u = mysqli_real_escape_string ($dbc, $_POST['username']);
} else {
 $reg_errors['username'] = 'Please enter a desired name!';
}

if (filter_var($_POST['email'],FILTER_VALIDATE_EMAIL)) {
 $e = mysqli_real_escape_string($dbc, $_POST['email']);
} else {
 $reg_errors['email'] = 'Please enter a valid email address!';
}
// Check for a password and match against the confirmed password:
if (preg_match ('/^(\w*(?=\w*\d)(?=\w*[a-z])(?=\w*[A-Z])\w*){6,20}$/', $_POST['pass1']) ) {
 if($_POST['pass1'] == $_POST['pass2']) {
  $p = mysqli_real_escape_string($dbc, $_POST['pass1']);
 } else {
  $reg_errors['pass2'] = 'Your password did not match the confirmed password!';
 }
} else {
 $reg_errors['pass1'] = 'Please enter a valid password!';
}

if(empty($reg_errors)) {
 $q = "SELECT email,username FROM users WHERE email='$e' OR username ='$u'";
 $r = mysqli_query($dbc, $q);
 $rows = mysqli_num_rows($r);

 if($rows == 0) { // No problems!
  // Add the user to the database...

  // Temporary: set expiration to a month!
  // Change after adding PayPal!
  //$q = "INSERT INTO users (username, email, pass, first_name, last_name, date_expires) VALUES ('$u', '$e', '"  .  get_password_hash($p) .  "', '$fn', '$ln', ADDDATE(NOW(), INTERVAL 1 MONTH) )";
  $q = "INSERT INTO users (username, email, pass, first_name, last_name, date_expires) VALUES ('$u', '$e', '"  .  get_password_hash($p) .  "', '$fn', '$ln', ADDDATE(NOW(), INTERVAL 1 MONTH) )";

  if (mysqli_affected_rows($dbc) == 1) { // If it ran OK.
  $r = mysqli_query($dbc, $q);
  echo '<h3>Thanks!</h3><p>Thank you for registering! You may now log in and access the site\'s content.</p>';

   // Send a separate email?
   $body = "Thank you for registering at <whatever site>. Blah. Blah. Blah.\n\n";
   mail($_POST['email'], 'Registration Confirmation', $body, 'From: admin@example.com');

   // Finish the page:
   include ('includes/footer.php'); // Include the HTML footer.
   exit(); // Stop the page.

  } else { // If it did not run OK.
   trigger_error('You could not be registered due to a system error. We apologize for any inconvenience.');
  }

 } else { // The email address or username is not available.

  if($rows == 2) { // Both are taken.

   $reg_errors['email'] = 'This email address has already been registered. If you have forgotten your password, use the link at right to have your password sent to you.';  
   $reg_errors['username'] = 'This username has already been registered. Please try another.';  
  } else { // One or both may be taken.
   // Get row:
   $row = mysqli_fetch_array($r, MYSQLI_NUM);

   if( ($row[0] == $_POST['email']) && ($row[1] == $_POST['username'])) { // Both match.
 $reg_errors['email'] = 'This email address has already been registered. If you have forgotten your password, use the link at right to have your password sent to you.';
 $reg_errors['username'] = 'This username has already been registered with this email address. If you have forgotten your password, use the link at right to have your password sent to you.';
   } elseif ($row[0] == $_POST['email']) { // Email match.
 $reg_errors['email'] = 'This email address has already been registered. If you have forgotten your password, use the link at right to have your password sent to you.';	 
   } elseif ($row[1] == $_POST['username']) { // Username match.
 $reg_errors['username'] = 'This username has already been registered. Please try another.';  
   }

  } // End of $rows == 2 ELSE.

 } // End of $rows == 0 IF.

} // End of empty($reg_errors) IF.
}// End of the main form submission conditional.
// Need the form functions script, which defines create_form_input():
require('includes/form_functions.inc.php');
?><h3>Register</h3>
<p>Access to the site's content is available to registered users at a cost of $10.00 (US) per year. Use the form below to begin the registration process. <strong>Note: All fields are required.</strong> After completing this form, you'll be presented with the opportunity to securely pay for your yearly subscription via <a href="http://www.paypal.com">PayPal</a>.</p>
<!-- The Form, created with the help of create_form_input() definied above in formfunctions.inc.php -->
<form action="register.php" method="post" accept-charset="utf-8" style="padding-left:100px">
 <p><label for="first_name"><strong>First Name</strong></label><br /><?php create_form_input('first_name', 'text', $reg_errors); ?></p>

 <p><label for="last_name"><strong>Last Name</strong></label><br /><?php create_form_input('last_name', 'text', $reg_errors); ?></p>

 <p><label for="username"><strong>Desired Username</strong></label><br /><?php create_form_input('username', 'text', $reg_errors); ?> <small>Only letters and numbers are allowed.</small></p>

 <p><label for="email"><strong>Email Address</strong></label><br /><?php create_form_input('email', 'text', $reg_errors); ?></p>

 <p><label for="pass1"><strong>Password</strong></label><br /><?php create_form_input('pass1', 'password', $reg_errors); ?> <small>Must be between 6 and 20 characters long, with at least one lowercase letter, one uppercase letter, and one number.</small></p>
 <p><label for="pass2"><strong>Confirm Password</strong></label><br /><?php create_form_input('pass2', 'password', $reg_errors); ?></p>
 <input type="submit" name="submit_button" value="Next →" id="submit_button" class="formbutton" />

</form>
<?php // Include the HTML footer:
include ('includes/footer.php');
?>

February 12, 2012

Good point about the image resizing and formatting! A quick google search should find a quick bit of code for 00cakea to limit the size and placement of the shown image, such as applying some CSS.

Also your first instance of creating the $image variable seems unnecessary(isn't it?), since you re-assign the variable a couple lines down anyway and never use it outside the if conditional there.

I do admire your ability to improvise, since that seams to be a large portion of programming. Trust me when I tell you I am not speaking from superiority, since you are likely a better programmer than me. Good job!!!

January 29, 2012

While I am partial to various cyclops throughout history, I am a SF Giants fan.

I do have one more question: On page 627, you reference a $_POST['existing'] variable on line 138(or is it technically a string... I get my terms mixed up sometimes lol), but I do not see one set or mentioned anywhere in the form, not even a hidden value like $_POST['submitted'] is often set. Where is $_POST['existing'] set in the script? Thanks

January 28, 2012

Ah, so the issue was not with the script, but that I had a user_id value in my cookies from a previous chapter script but no user_level value(0 or 1). I would imagine this would be an easy thing to avoid in a real world script where not everything comes from the site localhost . Thanks for the explanation.

I wanted to take the opportunity to say how much I love your writing style. There are MANY php books, and many are formatted horribly(more the publishers fault) or by the time you reach later chapters, the author assumes you've become a master programmer and stops explaining each step. I love how even in the last chapter, you still explain what each step is. You don't dwell on it, but you say what's going on AND you seam to know when a user might have forgotten a particular subject, and point back to the chapter where that topic is discussed more in depth. So: Thank You!

January 22, 2012

Hey Larry. First of all, loved this book so far. Already read the intro php book and am almost finished with this one, moving on to Effortless E-Commerce and your advanced php(latest edition) and javascript books to be released later this year. I hate that my first post here had to be a report of an error with your code but on page 563, on the footer.html file, line 17:

if ($_SESSION['user_level'] == 1)) {

It throws an error for an undefined index. A quick google search shows this fixes the problem:

if (isset($_SESSION['user_level']) && ($_SESSION['user_level'] == 1)) {

The first code assumes it's set, and if you first log on, and have no user level, it throws an error.

Also, for anyone seing the logout links instead of the registration links when you are first testing the site, check your cookies from past chapters and clear them for the site 'localhost' since some of the cookie/session names Larry uses are re-used in later examples, and they'll already have values. Not Larry's fault, as in a real world site, you would use common cookie/session names for different sites.

Sign In

giantsfan24

Posts

Joined

Last visited

Days Won

Content Type

Forums

Posts posted by giantsfan24

Get_Shopping_Cart_Contents Stored Procedure Missing "As Sku"

Register Script - Chapter 4

Register Script - Chapter 4

Adding Images To Browse_Prints.Php

Chapter 18 Page 563

Chapter 18 Page 563

Chapter 18 Page 563

Browse

Activity