new question

Harbinger

i have two tables:

+------+------------------+-----+
| name | pass | uid |
+------+------------------+-----+
| test | 39817a786ddf7333 | 1 |
+------+------------------+-----+

AND

+----+-------------------------------+
| id | directory |
+----+-------------------------------+
| 1 | www.blah.com/appraisals/bos/ |
+----+-------------------------------+

the first table is authentication obviously. i need to take the authentication and make it link to the second table using the uid & id fields with a sql statement like:

mysql> select directory

-> from auth, files where uid=id;

that turns out the directory that I want which is:

+-------------------------------+
| directory |
+-------------------------------+
| www.blah.com/appraisals/bos/ |
+-------------------------------+

two questions:

What sort of statement would I use to have the broswer redirect to this directory and display the contents (index.php or whatever) THERE will be more than one user, so it has to be smart enough to say if this user > then this directory...
What php code would work to make this all happen?

I apologize for my severe ineptitude but I am still learning and need to get something running so that I can then spend some time learning...instead of lighting things on fire from my frustration at programming ignorance.

thanks,

jesus_hairdo

You would use something like,

$sql = "SELECT directory,name FROM TABLE1, TABLE2  WHERE TABLE1.pass = PASSWORD('$password') AND TABLE1.name = '$name' AND TABLE1.uid = TABLE2.id"
/* This is assuming that the passwords are stored as mysql password'd values */

$result = mysql_query($sql) or die("Error in SQL<BR>$sql<BR>".mysql_errlor();

/*if there is an error in the sql syntax this will exit the script here and display the error message, useful in debugging, can be removed for production system*/

if (mysql_num_rows($result) == 0) // this basically says, if the sql query retrieves no matching rows, then the username or password must be incorrect
{
print "incorrect username and/or password";
exit;
}
else
{
$row = mysql_fetch_array($result); //retrieve the row from the database
headers("Location:$row[directory]"); //this redirects to the path stored in the database.
exit;
}

Rodders

Try this...

$sql = "select directory from auth, files where uid=id and id= '$loginid'";

$result = mysql_query($sql, $db_connect);

while ($row = mysql_fetch_assoc($result) ) {
 Header("Location:" . $row['directory']);
}

You need to setup $db_connect with your connection to the database and I'm assuming you will have some form of login script which gets the $loginid.

This also assumes that only one row will be returned from your query, so you can only have one row on each table for each ID.

Harbinger

<?php
session_start();

if ($userid && $password)
{
//If the user has just tried to log in

$db_conn = mysql_connect("localhost" , "****" , "****");
mysql_select_db("auth" , $db_conn);
$query = "select * from auth "
	."where name='$userid' "
	."and pass=password('$password')";
$result = mysql_query($query, $db_conn);
if (mysql_num_rows($result) >0 )
{
//If they are in the database register the user id
$valid_user = $userid;
session_register("valid_user");
}
}
?>

How do I implement the code you have suggested WITH this? On a new page? within this set?

Harbinger

This also assumes that only one row will be returned from your query, so you can only have one row on each table for each ID.

What do you mean by this? I can only have one row per table??? I need to have multiple rows, for multiple users.

Lost as usual.

Rodders

To implement these ideas into your code will be simple fingers crossed

1) Change your $query

$query = "select 
files.directory from auth, files "
    ."where auth.name='$userid' "
    ."and auth.pass=password('$password') "
    ."and files.id = auth.uid;

This returns just the directory name if a valid userid and password are supplied.

2) Add this.....

....
....
session_register("valid_user");
header("Location:" . $row[directory]); // THIS IS NEW CODE
}

This also assumes that only one row will be returned from your query, so you can only have one row on each table for each ID.

You are joining two tables - auth and files where id=uid. If your query were to return more than one row the user would be sent to the directory of the first row. I don't think you will have a problem, but just check your table definitions so that you can't have two rows per user in any of the tables.

jesus_hairdo

You are joining two tables - auth and files where id=uid. If your query were to return more than one row the user would be sent to the directory of the first row. I don't think you will have a problem, but just check your table definitions so that you can't have two rows per user in any of the tables.

In your MySQL table definitions you need to make the id, and uid primary keys of their respective table. This will ensure that they can only be entered once (the database will not let you add it a 2nd time

Jamie

Harbinger

so change my authentication code to:

<?php
session_start();

if ($userid && $password)
{
//If the user has just tried to log in

$db_conn = mysql_connect("localhost" , "****" , "****");
mysql_select_db("auth" , $db_conn);
$query = "select 
files.directory from auth, files "
    ."where auth.name='$userid' "
    ."and auth.pass=password('$password') "
    ."and files.id = auth.uid;
$result = mysql_query($query, $db_conn);
if (mysql_num_rows($result) >0 )
{
//If they are in the database register the user id
$valid_user = $userid;
....
....
session_register("valid_user");
header("Location:" . $row[directory]); // THIS IS NEW CODE
}

}
?>

I am sure i messed something up there....

Rodders

Remove the '......' lines, that was just to show that there were lines of code before what I had, otherwise you could have put it at the top of the page, or the bottom, or somewhere randomly in the middle!

Harbinger

hehe..

i knew i would screw that part up. thought about leaving it out but didnt know what it was for. oh well. lesson learned.

Harbinger

<?php
session_start();

if ($userid && $password)
{
//If the user has just tried to log in

$db_conn = mysql_connect("localhost" , "****" , "****");
mysql_select_db("auth" , $db_conn);
$query = "select 
files.directory from auth, files "
    ."where auth.name='$userid' "
    ."and auth.pass=password('$password') "
    ."and files.id = auth.uid;
$result = mysql_query($query, $db_conn);
if (mysql_num_rows($result) >0 )
{
//If they are in the database register the user id
$valid_user = $userid;
session_register("valid_user");
header("Location:" . $row[directory]); // THIS IS NEW CODE
}

}
?>

Parse error: parse error in /home/httpd/vhosts/blah.com/httpdocs/sbmactest/appraise.php on line 20

Harbinger

Originally posted by jesus_hairdo

In your MySQL table definitions you need to make the id, and uid primary keys of their respective table. This will ensure that they can only be entered once (the database will not let you add it a 2nd time

Jamie

+-----------+--------------+------+-----+---------+----------------+
| Field | Type | Null | Key | Default | Extra |
+-----------+--------------+------+-----+---------+----------------+
| id | int(11) | | PRI | NULL | auto_increment |
| directory | varchar(255) | | | | |
+-----------+--------------+------+-----+---------+----------------+

thanks JH for that. but that is the one thing i do know how to do. i have picked up mysql fairly well but it's the PHP that is giving me troubles.

Harbinger

process of elimination now.

the code now executes and gives this error:

Forbidden
You don't have permission to access to this document on this server.

Harbinger

it appears as though it is attempting to do something other than display the index file of that directory.

Harbinger

anyone??

jamie_kerwick

Does it give an error code 403 ??

are the filesystem access permissions setup correctly for the page you are opening. -- do you know what type of server your pages are on (unix / linux / NT )??

Just to test what you are forbidden access to, try changing the Header re-direct to a url you know you can access.
Also try manually inputting the url you are re-directing to.

Harbinger

linux.

i can pull it up manually fine.

permissions are fine.

jamie_kerwick

What is the URL that is stored in the database field ??
And what is the URL of the script doing the re-directing??

From your example earlier it looks as though you are storing an absolute address (www.blah.com/appraisals/bos/ ). If that is the case, i think you would need the redirect to look like

header('Location: [url]http://[/url]'.$row[directory]);
exit;

As if it doesn't have the http i think it still thinks that its a relative link, so looks for $present_dir/www.blah.com/appraisals/bos/ which is obviously not correct.

If your server is www.blah.com then you shouldn't need to store that in the database as you already know what that is.

Harbinger

Sorry but I don't follow the code here.

do i need to edit this code to insert anything?

header('Location: <a href="http://" target="_blank">[url]http://[/url]</a>'.$row[directory]);
exit;

jamie_kerwick

The code should be

header('Location: http:// .'$row[directory]');
exit;

It was a bit messed up last time because the forum kept trying to automatically parse it as a url 🙁