function createExtFile($type) { $pathOfExt = "C:/data/ext/"; $pathOfDatabase = "C:/data/database/"; $t = time(); $temp_id = array(); $con = mysqli_connect("localhost", "root", "1212312121", "proj4d"); mysqli_set_charset($con, "utf8"); $query = "SELECT id FROM " . $type . "_detail WHERE isValid = 1"; $statement = mysqli_prepare($con, $query); $success = mysqli_stmt_execute($statement); mysqli_stmt_store_result($statement); mysqli_stmt_bind_result($statement, $id); $path = $pathOfExt . $type . $t . ".ext"; $myfile = fopen($path, "w") or die("Unable to open file!"); while (mysqli_stmt_fetch($statement)) { array_push($temp_id, $id); } $i = 0; for ($i; $i < sizeof($temp_id) - 1; $i++) { $id = $temp_id[$i]; $txt = $pathOfDatabase . $type . "/" . $id . "/1.png;" . $id . PHP_EOL; fwrite($myfile, $txt); $txt = $pathOfDatabase . $type . "/" . $id . "/2.png;" . $id . PHP_EOL; fwrite($myfile, $txt); } $id = $temp_id[$i]; $txt = $pathOfDatabase . $type . "/" . $id . "/1.png;" . $id . PHP_EOL; fwrite($myfile, $txt); $txt = $pathOfDatabase . $type . "/" . $id . "/2.png;" . $id; fwrite($myfile, $txt); fclose($myfile); return $type . $t . ".ext"; }
public function EliminarMarca($marca) { $mysqli = $this->mysqli; $stmt = \mysqli_prepare($mysqli, "CALL ELIMINAR_MARCA(?)"); \mysqli_stmt_bind_param($stmt, 'i', $marca); \mysqli_stmt_execute($stmt); }
public function execute($sql) { global $registry; $link = $registry->get("dl"); $res = mysqli_query($link, $sql); mysqli_stmt_execute($res); }
/** * Save data * @param array Request data (unfiltered) */ function saveAction($request) { require_once 'config.php'; //connection: $link = mysqli_connect($servidor, $user, $pass, $database) or die("Error " . mysqli_error($link)); $flag = 'false'; $param = $request; $idUrl = mysqli_real_escape_string($link, $param['idUrl']); $dataPost = isset($param['data']) ? $param['data'] : false; $idPage = _checkIdUrl($link, $idUrl); if ($idPage > 0 && is_array($dataPost) && count($dataPost) > 0) { $reg = formarDataToSerial($idPage, $dataPost); $reg['page_id'] = intval($reg['page_id']); $reg['browser_id'] = $reg['browser_id']; $reg['view_port'] = mysqli_real_escape_string($link, $reg['view_port']); $reg['window_browser'] = mysqli_real_escape_string($link, $reg['window_browser']); $reg['screen'] = mysqli_real_escape_string($link, $reg['screen']); $query = "INSERT INTO heatmap (page_id, browser_id, view_port, window_browser, screen, data_serial, created_at) " . "VALUES ('" . $reg['page_id'] . "', '" . $reg['browser_id'] . "','" . $reg['view_port'] . "','" . $reg['window_browser'] . "','" . $reg['screen'] . "', '" . $reg['data_serial'] . "', '" . date('Y-m-d H:i:s') . "')"; $stmt = mysqli_prepare($link, $query); mysqli_stmt_execute($stmt); mysqli_stmt_close($stmt); $flag = 'true'; } mysqli_close($link); echo $flag; }
function email() { global $link, $stmt; if (defined("CRYPT_BLOWFISH") && CRYPT_BLOWFISH) { $salt = '$2y$11$' . substr(md5(uniqid(rand(), true)), 0, 22); $password = crypt($_POST['password'], $salt); } mysqli_stmt_bind_param($stmt, 'ss', $_POST['email'], $password); mysqli_stmt_execute($stmt); mysqli_stmt_close($stmt); //to verify email $hash = hash('md5', $_POST["email"]); $stmt = mysqli_prepare($link, "INSERT INTO `verify_email`(`email`, `hash`) VALUES(?,'" . $hash . "')") or die(mysqli_error($link)); mysqli_stmt_bind_param($stmt, 's', $_POST['email']); mysqli_stmt_execute($stmt); mysqli_stmt_close($stmt); mysqli_close($link); $to = $_POST['email']; $subject = 'Email varification'; $message = 'Please click this link to activate your account: http://woofwarrior.com//gallery/verify.php?email=' . $_POST['email'] . '&hash=' . $hash . ' '; $headers = "From: activation@woofwarrior.com\r\n"; mail($to, $subject, $message, $headers); //echo json_encode('signed up, verify email. Please click this link to activate your account: http://woofwarrior.com//gallery/htdocs/verify.php?email='.$_POST['email'].'&hash='.$hash); echo json_encode('verify email'); }
function isInQueue() { // Reference Global Variables global $globalHostName; global $globalUserName; global $globalPassword; global $globalDatabase; // MySQL Connection $connection = mysqli_connect($globalHostName, $globalUserName, $globalPassword, $globalDatabase); // Connection Error Handling if ($connection->connect_error) { // Kill the Connection die("Could Not Connect to the Database"); } // MySQL Injection Neutralized Email Variable $safeEmail = mysqli_real_escape_string($connection, $_REQUEST['inputEmail']); // Query Preparation $query = mysqli_prepare($connection, 'SELECT COUNT(*) as total FROM users WHERE email = ?'); $query->bind_param('s', $safeEmail); // Query Execution mysqli_stmt_execute($query); // Query Result Analysis mysqli_stmt_bind_result($query, $total); $data = mysqli_stmt_fetch($query); //----- $connection->close(); // If That Email is Already Registered... if ($total > 0) { echo "true"; return true; } else { echo "false"; return false; } }
public function EliminarTienda($tienda) { $mysqli = $this->mysqli; $stmt = \mysqli_prepare($mysqli, "CALL ELIMINAR_TIENDA(?);"); \mysqli_stmt_bind_param($stmt, 'i', $tienda); \mysqli_stmt_execute($stmt); }
public function EliminarUsuario($ID) { $mysqli = $this->mysqli; $stmt = \mysqli_prepare($mysqli, "CALL ELIMINAR_ADMIN(?)"); \mysqli_stmt_bind_param($stmt, 'i', $ID); \mysqli_stmt_execute($stmt); }
function insertAgent($agtdata) { //SQL connection variables $servername = "localhost"; $username = "******"; $password = ""; $dbname = "travelexperts"; //myslqi connection and prepared statement $dbh = @mysqli_connect($servername, $username, $password) or die("Connect Error: " . mysqli_connect_error()); mysqli_select_db($dbh, $dbname); $colnames = array_keys($agtdata); $colnamestring = implode(", ", $colnames); $sql = "insert into agents ({$colnamestring}) values (?, ?, ?, ?, ?, ?, ?, ?, ?)"; //number of ? needs to match the number of fields $stmt = mysqli_prepare($dbh, $sql); $values = array_values($agtdata); mysqli_stmt_bind_param($stmt, "ssssssiss", $values[0], $values[1], $values[2], $values[3], $values[4], $values[5], $values[6], $values[7], $values[8]); // the number of s or i (string or int or other) needs to match the number and type of fields $result = mysqli_stmt_execute($stmt); //print(mysqli_error($dbh)); //print("result=$result"); //print($sql); mysqli_close($dbh); //Return messages if successful or unsuccessful if ($result) { return "A new agent account was created successfully<br />"; } else { return "Failed to create new agent account<br />"; } }
function update_last_try($dbh, $config, $key) { $stmt = mysqli_prepare($dbh, "UPDATE " . $config['table_prefix'] . "keys SET last_try = NOW() WHERE `key` = ?"); mysqli_stmt_bind_param($stmt, "s", $key); mysqli_stmt_execute($stmt); mysqli_stmt_close($stmt); }
function login() { include_once 'database_conn.php'; // check is form filled if (isFormFilled()) { // if not filled, stop return; } $uid = sanitizeData($_POST['username']); $pswd = sanitizeData($_POST['password']); $columnLengthSql = "\n\t\t\tSELECT COLUMN_NAME, CHARACTER_MAXIMUM_LENGTH\n\t\t\tFROM INFORMATION_SCHEMA.COLUMNS\n\t\t\tWHERE TABLE_NAME = 'te_users'\n\t\t\tAND (column_name = 'username'\n\t\t\tOR column_name = 'passwd')"; $COLUMN_LENGTH = getColumnLength($conn, $columnLengthSql); $isError = false; $errMsg[] = validateStringLength($uid, $COLUMN_LENGTH['username']); //uid $errMsg[] = validateStringLength($pswd, $COLUMN_LENGTH['passwd']); //pswd for ($i = 0; $i < count($errMsg); $i++) { if (!($errMsg[$i] === true)) { echo "{$errMsg[$i]}"; $isError = true; } } //if contain error, halt continue executing the code if ($isError) { return; } // check is uid exist $checkUIDSql = "SELECT passwd, salt FROM te_users WHERE username = ?"; $stmt = mysqli_prepare($conn, $checkUIDSql); mysqli_stmt_bind_param($stmt, "s", $uid); mysqli_stmt_execute($stmt); mysqli_stmt_store_result($stmt); if (mysqli_stmt_num_rows($stmt) <= 0) { echo "Sorry we don't seem to have that username."; return; } mysqli_stmt_bind_result($stmt, $getHashpswd, $getSalt); while (mysqli_stmt_fetch($stmt)) { $hashPswd = $getHashpswd; $salt = $getSalt; } // if exist, then get salt and db hashed password // create hash based on password // hash pswd using sha256 algorithm // concat salt in db by uid // hash using sha256 algorithm $pswd = hash("sha256", $salt . hash("sha256", $pswd)); // check does it match with hased password from db if (strcmp($pswd, $hashPswd) === 0) { echo "Success login<br/>"; // add session $_SESSION['logged-in'] = $uid; // go to url $url = $_SERVER['REQUEST_URI']; header("Location: {$url}"); } else { echo "Fail login<br/>"; } }
function update_vote($image_id) { //get number of votes and update global $link; /*$result = mysqli_query($link, "SELECT `amount` FROM `votes_amount` WHERE `imageID`=".$image_id.";") or die(mysqli_error($link)); $amount = mysqli_fetch_assoc($result); $new_amount = $amount['amount']+1; mysqli_query($link, "UPDATE `votes_amount` SET `amount`=".$new_amount." WHERE `imageID`=".$image_id.";") or die(mysqli_error($link));*/ $stmt = mysqli_stmt_init($link); mysqli_stmt_prepare($stmt, "SELECT `amount` FROM `votes_amount` WHERE `imageID`=?;") or die(mysqli_error($link)); mysqli_stmt_bind_param($stmt, 'i', $image_id); mysqli_stmt_execute($stmt); $result = mysqli_stmt_get_result($stmt); mysqli_stmt_close($stmt); $amount = mysqli_fetch_assoc($result); $new_amount = $amount['amount'] + 1; $stmt = mysqli_prepare($link, "UPDATE `votes_amount` SET `amount`=" . $new_amount . " WHERE `imageID`=?;") or die(mysqli_error($link)); mysqli_stmt_bind_param($stmt, 'i', $image_id); mysqli_stmt_execute($stmt); mysqli_stmt_close($stmt); //return ajax data if (isset($_SESSION['id']) && !isset($_POST['action']) && !isset($_POST['votePic'])) { $data = array('new_amount' => $new_amount, 'imageID' => $image_id); } elseif (isset($_POST['action']) && $_POST['action'] == 'anonymous_voting') { //get another two images $result = mysqli_query($link, "SELECT * FROM `image` ORDER BY RAND() LIMIT 2;") or die(mysqli_error($link)); $data = array(); while ($row = mysqli_fetch_assoc($result)) { $data[] = $row; } } mysqli_close($link); return $data; }
public function insertItems(Items $items) { $con = self::openConnection(); $affected = 0; mysqli_begin_transaction($con); $stm = mysqli_stmt_init($con); $sql = "INSERT INTO category VALUES (?, ?, ?)"; mysqli_stmt_prepare($stm, $sql); foreach ($items->getItems() as $item) { $code = $item->getCode(); $name = $item->getName(); $parent = $item->getParent() == null ? null : $item->getParent()->getCode(); mysqli_stmt_bind_param($stm, 'sss', $code, $name, $parent); mysqli_stmt_execute($stm); if (mysqli_affected_rows($con) == 1) { $affected++; } } if ($affected > 0) { mysqli_commit($con); } else { mysqli_rollback($con); } return $affected; }
function saveimage($name, $image) { $con = mysqli_connect("localhost", "root", "root", "Alegatori") or die("Error " . mysqli_error($link)); $qry = "INSERT INTO Candidati (Nume,Voturi,Poza,Sfarsit) VALUES ('{$name}',0,'{$image}',0)"; $stmt = mysqli_prepare($con, $qry); mysqli_stmt_execute($stmt); }
public function query($sql, $values = array()) { $sql = new Expressions($sql); $sql->set_connection($this); $sql->bind_values($values); $sql = trim($sql->to_s()); $values = $values ? array_flatten($values) : array(); if (!($sth = mysqli_prepare($this->connection, $sql))) { throw new DatabaseException(mysqli_error($this->connection), mysqli_errno($this->connection)); } if (count($values) > 0) { $params = array($sth, ''); foreach ($values as &$value) { if (is_int($value)) { $params[1] .= 'i'; } elseif (is_float($value)) { $params[1] .= 'd'; } else { $params[1] .= 's'; } $params[] =& $value; } if ($params[1]) { call_user_func_array('mysqli_stmt_bind_param', $params); } } if (is_int($ret = mysqli_stmt_execute($sth))) { return $ret; } return new MysqliResultSet($sth); }
public function insertItems(Items $items) { $con = self::openConnection(); $affected = 0; mysqli_begin_transaction($con); $stm = mysqli_stmt_init($con); $sql = "INSERT INTO product VALUES (?, ?, ?, ?, ?, ?, ?, ?)"; mysqli_stmt_prepare($stm, $sql); foreach ($items->getItems() as $item) { $code = $item->getCode(); $articul = $item->getArticul(); $name = $item->getName(); $bmuID = $item->getBasicMeasurementUnit() == null ? null : $item->getBasicMeasurementUnit()->getId(); $price = $item->getPrice(); $curID = $item->getCurrency() == null ? null : $item->getCurrency()->getId(); $muID = $item->getMeasurementUnit() == null ? null : $item->getMeasurementUnit()->getId(); $parent = $item->getParent() == null ? null : $item->getParent()->getCode(); mysqli_stmt_bind_param($stm, 'sssdddds', $code, $articul, $name, $bmuID, $price, $curID, $muID, $parent); mysqli_stmt_execute($stm); if (mysqli_affected_rows($con) == 1) { $affected++; } } if ($affected > 0) { mysqli_commit($con); } else { mysqli_rollback($con); } return $affected; }
function registrator($link) { //Функция регистрации пользователя (Взято из интернета "редактированно") if (!empty($_POST["submit"])) { if (!preg_match("/^[a-zA-Z0-9]+\$/", $_POST['login'])) { $err[] = "Логин может состоять только из букв английского алфавита и цифр<br>"; } if (strlen($_POST['login']) < 3 or strlen($_POST['login']) > 30) { $err[] = "Логин должен быть не меньше 3-х символов и не больше 30<br>"; } $query = "SELECT COUNT(user_id) FROM users WHERE user_login='******'login']) . "'"; if ($stmt = mysqli_prepare($link, $query)) { mysqli_stmt_execute($stmt); mysqli_stmt_bind_result($stmt, $user_id); mysqli_stmt_store_result($stmt); mysqli_stmt_fetch($stmt); mysqli_stmt_close($stmt); } if (!$user_id == 0) { $err[] = "Пользователь с таким логином уже существует в базе данных<br>"; } if (count($err) == 0) { $login = $_POST['login']; $password = md5(md5(trim($_POST['password']))); mysqli_query($link, "INSERT INTO users SET user_login='******', user_password='******'"); header("Location: login.php"); exit; } else { print "<b>При регистрации произошли следующие ошибки:</b><br>"; foreach ($err as $error) { print $error . "<br>"; } } } }
public function Get_Safe_Item($table, $field, $var_type, $field_like, $like = FALSE) { // Подготавливаем sql-строку и предварительный запрос $sign = $like ? "LIKE" : "="; $sql = "SELECT `{$field}` FROM `{$table}` WHERE `{$field}` {$sign} ?"; $statement = mysqli_prepare($this->db_connector, $sql); // Связываем параметр с меткой и выполняем запрос switch ($var_type) { case "string": $var = "s"; break; case "integer": $var = "i"; break; case "double": $var = "d"; break; default: $var = "b"; break; } $field_value = $like ? $field_like . "%" : $field_like; mysqli_stmt_bind_param($statement, $var, $field_value); mysqli_stmt_execute($statement); // Связываем переменную со значением результата запроса и получаем значение результата mysqli_stmt_bind_result($statement, $safe_value); if (mysqli_stmt_fetch($statement)) { return $safe_value; } else { return NULL; } }
function changeItem($elemID, $uniqueID, $changeTo) { // Connect to the MySQL database $host = "fall-2015.cs.utexas.edu"; $user = "******"; $file = fopen("/u/pjobrien/password.txt", "r"); $line = fgets($file); $pwd = trim($line); fclose($file); $dbs = "cs329e_pjobrien"; $port = "3306"; $connect = mysqli_connect($host, $user, $pwd, $dbs, $port); if (empty($connect)) { die("mysql_connect failed " . mysqli_connect_error()); } $elemID = trim($elemID); $uniqueID = trim($uniqueID); $changeTo = trim($changeTo); // get the item we want to change from the front end $stmt = mysqli_prepare($connect, "UPDATE userInfo SET {$elemID} = ? WHERE username= ?"); mysqli_stmt_bind_param($stmt, 'ss', $changeTo, $uniqueID) or die("Failed: " . mysqli_error($connect)); mysqli_stmt_execute($stmt) or die("Failed: " . mysqli_error($connect)); mysqli_stmt_close($stmt); // Close connection to the database mysqli_close($connect); return true; }
function checkCredentials($username, $password) { $link = retrieve_mysqli(); //Test to see if their credentials are valid $queryString = 'SELECT salt, hashed_password FROM user WHERE username = ?'; if ($stmt = mysqli_prepare($link, $queryString)) { //Get the stored salt and hash as $dbSalt and $dbHash mysqli_stmt_bind_param($stmt, "s", $username); mysqli_stmt_execute($stmt); mysqli_stmt_bind_result($stmt, $dbSalt, $dbHash); mysqli_stmt_fetch($stmt); mysqli_stmt_close($stmt); // close prepared statement mysqli_close($link); /* close connection */ //Generate the local hash to compare against $dbHash $localhash = generateHash($dbSalt . $password); //Compare the local hash and the database hash to see if they're equal if ($localhash == $dbHash) { return true; } // password hashes matched, this is a valid user } return false; // password hashes did not match or username didn't exist }
public function insertBook($bookName, $bookAuthor) { $stmt = mysqli_prepare($this->connection, 'INSERT INTO books(book_title) VALUES (?)'); mysqli_stmt_bind_param($stmt, 's', $bookName); mysqli_stmt_execute($stmt); $authorId = []; $author = new Author(); $allAuthors = $author->selectAllAuthors(); foreach ($bookAuthor as $au) { foreach ($allAuthors as $key => $value) { if ($au == $value) { $authorId[] = $key; } } } $books = $this->getBook(); $keyID = 0; foreach ($books as $key => $title) { if ($title == $bookName) { $keyID = $key; } } $stmt2 = mysqli_prepare($this->connection, 'INSERT INTO books_authors(book_id,author_id) VALUES (?,?)'); for ($i = 0; $i < count($authorId); $i++) { mysqli_stmt_bind_param($stmt2, 'ii', $keyID, $authorId[$i]); mysqli_stmt_execute($stmt2); } }
public function EliminarProducto($producto) { $mysqli = $this->mysqli; $stmt4 = \mysqli_prepare($mysqli, "CALL ELIMINAR_PRODUCTO(?);"); \mysqli_stmt_bind_param($stmt4, 'i', $producto); \mysqli_stmt_execute($stmt4); \mysqli_stmt_close($stmt4); }
public function EliminarRedSocial($id) { $mysqli = $this->mysqli; $stmt = \mysqli_prepare($mysqli, "CALL ELIMINAR_RS(?)"); \mysqli_stmt_bind_param($stmt, 'i', $id); \mysqli_stmt_execute($stmt); \mysqli_stmt_close($stmt); }
public function EliminarImagen($imagen) { $mysqli = $this->mysqli; $stmt = \mysqli_prepare($mysqli, "CALL ELIMINAR_IMG(?);"); \mysqli_stmt_bind_param($stmt, 'i', $imagen); \mysqli_stmt_execute($stmt); \mysqli_stmt_close($stmt); }
public static function execute($psql, $prm = null) { $ret = false; if ($psql) { $ret = mysqli_stmt_execute($psql); } return $ret; }
public function ActualizarCategoria($nombre, $imagen, $categoria) { $mysqli = $this->mysqli; $stmt = \mysqli_prepare($mysqli, "CALL ACTUALIZAR_CAT(?,?,?)"); \mysqli_stmt_bind_param($stmt, 'sii', $nombre, $imagen, $categoria); \mysqli_stmt_execute($stmt); \mysqli_stmt_close($stmt); }
function mysqli_fetch_array_large($offset, $link, $package_size) { /* we are aiming for maximum compression to test MYSQLI_CLIENT_COMPRESS */ $random_char = str_repeat('a', 255); $sql = "INSERT INTO test(label) VALUES "; while (strlen($sql) < $package_size - 259) { $sql .= sprintf("('%s'), ", $random_char); } $sql = substr($sql, 0, -2); $len = strlen($sql); assert($len < $package_size); if (!@mysqli_query($link, $sql)) { if (1153 == mysqli_errno($link) || 2006 == mysqli_errno($link) || stristr(mysqli_error($link), 'max_allowed_packet')) { /* myslqnd - [1153] Got a packet bigger than 'max_allowed_packet' bytes libmysql -[2006] MySQL server has gone away */ return false; } printf("[%03d + 1] len = %d, [%d] %s\n", $offset, $len, mysqli_errno($link), mysqli_error($link)); return false; } /* buffered result set - let's hope we do not run into PHP memory limit... */ if (!($res = mysqli_query($link, "SELECT id, label FROM test"))) { printf("[%03d + 2] len = %d, [%d] %s\n", $offset, $len, mysqli_errno($link), mysqli_error($link)); return false; } while ($row = mysqli_fetch_assoc($res)) { if ($row['label'] != $random_char) { printf("[%03d + 3] Wrong results - expecting '%s' got '%s', len = %d, [%d] %s\n", $offset, $random_char, $row['label'], $len, mysqli_errno($link), mysqli_error($link)); return false; } } mysqli_free_result($res); if (!($stmt = mysqli_prepare($link, "SELECT id, label FROM test"))) { printf("[%03d + 4] len = %d, [%d] %s\n", $offset, $len, mysqli_errno($link), mysqli_error($link)); return false; } /* unbuffered result set */ if (!mysqli_stmt_execute($stmt)) { printf("[%03d + 5] len = %d, [%d] %s, [%d] %s\n", $offset, $len, mysqli_stmt_errno($stmt), mysqli_stmt_error($stmt), mysqli_errno($link), mysqli_error($link)); return false; } $id = $label = NULL; if (!mysqli_stmt_bind_result($stmt, $id, $label)) { printf("[%03d + 6] len = %d, [%d] %s, [%d] %s\n", $offset, $len, mysqli_stmt_errno($stmt), mysqli_stmt_error($stmt), mysqli_errno($link), mysqli_error($link)); return false; } while (mysqli_stmt_fetch($stmt)) { if ($label != $random_char) { printf("[%03d + 7] Wrong results - expecting '%s' got '%s', len = %d, [%d] %s\n", $offset, $random_char, $label, $len, mysqli_stmt_errno($stmt), mysqli_stmt_error($stmt)); return false; } } mysqli_stmt_free_result($stmt); mysqli_stmt_close($stmt); return true; }
function getRequests($senterId, $receiverId) { global $db; $query = 'SELECT transactions.uid, transactions.bcid, transactions.state, transactions.time, bcopies.bcid FROM transactions CROSS JOIN bcopies ON bcopies.bcid = transactions.bcid WHERE transactions.uid = ? AND bcopies.uid = ? AND transactions.state = "request" ORDER BY transactions.time DESC '; $stmt = mysqli_prepare($db, $query); mysqli_stmt_bind_param($stmt, 'ii', $senterId, $receiverId); mysqli_stmt_execute($stmt); mysqli_stmt_store_result($stmt); mysqli_stmt_bind_result($stmt, $uid, $bcid, $state, $time, $bcid); $requests = []; while (mysqli_stmt_fetch($stmt)) { $request['uid'] = $uid; $request['bcid'] = $bcid; $request['state'] = $state; $request['time'] = $time; $request['bcid'] = $bcid; $requests[] = $request; } return $requests; }
function getPageInfoByNewsPoster($con, $page_id) { $result_array = array(); $query_case_list = "SELECT key_value_latin, key_value FROM page WHERE page_id = ?"; if (!($stmt = mysqli_prepare($con, $query_case_list))) { #echo "Prepare failed: (" . mysqli_connect_errno() . ") " . mysqli_connect_error()."<br>"; } //set values #echo "set value..."; $id = 1; if (!mysqli_stmt_bind_param($stmt, "s", $page_id)) { #echo "Binding parameters failed: (" . mysqli_connect_errno() . ") " . mysqli_connect_error()."<br>"; } #echo "execute..."; if (!mysqli_stmt_execute($stmt)) { #echo "Execution failed: (" . mysqli_connect_errno() . ") " . mysqli_connect_error()."<br>"; } /* instead of bind_result: */ #echo "get result..."; if (!mysqli_stmt_bind_result($stmt, $key_value_latin, $key_value)) { #echo "Getting results failed: (" . mysqli_connect_errno() . ") " . mysqli_connect_error()."<br>"; } if (mysqli_stmt_fetch($stmt)) { $result_array = array("key_value_latin" => $key_value_latin, "key_value" => $key_value); } else { #echo "Fetching results failed: (" . mysqli_connect_errno() . ") " . mysqli_connect_error()."<br>"; print_r(error_get_last()); } mysqli_stmt_close($stmt); return $result_array; }
function logi_sisse() { if (isset($_POST['username'], $_POST['password'])) { global $link; $username = $_POST['username']; $password = $_POST['password']; $stmt = mysqli_prepare($link, "SELECT kasutajanimi, parool, kasutaja_id FROM mario_kasutajad WHERE kasutajanimi = ? AND parool = SHA1(?)"); $bind = mysqli_stmt_bind_param($stmt, "ss", $username, $password); $exce = mysqli_stmt_execute($stmt); //true v false $bind_r = mysqli_stmt_bind_result($stmt, $r['kasutajanimi'], $r['parool'], $r['kasutaja_id']); var_dump(mysqli_stmt_fetch($stmt)); if ($exce) { session_start(); session_regenerate_id(); $_SESSION['kasutaja1'] = $r['kasutajanimi']; $_SESSION['kasutaja'] = $r['kasutaja_id']; $nimi = $r['kasutajanimi']; header('Location: Toad.php'); exit; } else { echo "Vale kasutajanimi või parool!"; } mysqli_close($link); } }