See anything wrong?

[Sharif]

Does anyone see ANYTHING wrong with this code:

if($CODE == '01' && $_POST['submit'] == 'Send Password')
{
	$sql = "SELECT password FROM users WHERE email = '" . $_POST['email'] .  "'";
	$query = mysql_query($sql) or die(sql_error());
	$row = mysql_fetch_array($query);

if(mysql_num_rows($query) == 1)
{
	mail($_POST['email'], $forgot['subject1'], $forgot['message1'], $forgot['headers']);
	echo $forgot['pass_sent'];
	exit();
}
else
{
	echo $forgot['email'];
}
}
elseif($CODE == '02' && $_POST['submit'] == 'Send Username')
{
	$sql = "SELECT username, password FROM users email = '" . $_POST['email'] . "'";
	$query = mysql_query($sql) or die(sql_error());
	$row = mysql_fetch_array($query);

if(mysql_num_rows($query) == 1)
{
	mail($_POST['email'], $forgot['subject2'], $forgot['message2'], $forgot['headers']);
	echo $forgot['user_sent'];
	exit();
}
else
{
	echo $forgot['email'];
}
}

for some reason, it will not work...

[stolzyboy]

where does it not work, are you getting any errors, what have you tried...

have you troubleshooted, thrown echos in the if's to make sure you are getting there, etc...

[stolzyboy]

also just noticed you are missing your WHERE in this line

$sql = "SELECT username, password FROM users email = '" . $_POST['email'] . "'";

should be

$sql = "SELECT username, password FROM users WHERE email = '" . $_POST['email'] . "'";

[Sharif]

let me post the whole code because that snippet is confusing if you do not know what the other code is doing:

session_start();
header("Cache-control: private"); 
include('required/config.php');
include('required/language.php');
include('required/functions.php');

if(!isset($CODE) || $CODE == '')
{
	header('Location: index.php');
}
//CODE 01 is used to send a password reminder
elseif($CODE == '01')
{
	echo $forgot['password'];
	include('forms/forgot_pass.php');
}
//CODE 01 is used to send a username AND password reminder
elseif($CODE == '02')
{
	echo $forgot['username'];
	include('forms/forgot_user.php');
}
elseif($CODE == '01' && $_POST['submit'] == 'Send Password')
{
	$sql = "SELECT password FROM users WHERE email = '" . $_POST['email'] . "'";
	$query = mysql_query($sql) or die(sql_error());
	$row = mysql_fetch_array($query);

if(mysql_num_rows($query) == 1)
{
	mail($_POST['email'], $forgot['subject1'], $forgot['message1'], $forgot['headers']);
	echo $forgot['pass_sent'];
	exit();
}
else
{
	echo $forgot['email'];
    include('forms/forgot_user.php');
	exit();
}
}
elseif($CODE == '02' && $_POST['submit'] == 'Send Username')
{
	$sql = "SELECT username, password FROM users WHERE email = '" . $_POST['email'] . "'";
	$query = mysql_query($sql) or die(sql_error());
	$row = mysql_fetch_array($query);

if(mysql_num_rows($query) == 1)
{
	mail($_POST['email'], $forgot['subject2'], $forgot['message2'], $forgot['headers']);
	echo $forgot['user_sent'];
	exit();
}
else
{
	echo $forgot['email'];
    include('forms/forgot_user.php');
	exit();
}
}

[Weedpacket]

See other replies.

[Sharif]

I've double checked SQL queries, used some echos to see if all the variables used are getting values and it all checks out. I don't get it... why will it now work?

[Weedpacket]

Originally posted by Sharif
I've double checked SQL queries, used some echos to see if all the variables used are getting values and it all checks out. I don't get it... why will it now work?

Sorry? Now work or not work?
If it's "now work" then congratulations.

If it's "not work" then no-one knows what you mean because you haven't explained that bit. For all you've said the server might be going down in flames.

As stolzyboy asked: "where does it not work, are you getting any errors,"

[Sharif]

I meant NOT WORKING. What happens is, on the form that I include(), after I press submit (value = Send Password), nothing happens, it just stays on the page. That's it..

[HalfaBee]

I think the problem is in your if statement.

You have

if( code==01 )
...
elseif( code==02 )
...
elseif( code==01 AND ... ) this will never be executed if Code==01

HalfaBee

[Sharif]

I'm going to post the code in the files used with this page that is used to send a password and username reminder.

REMINDER PAGE:

<?php
session_start();

//CODE 01 is used to send a password reminder
if(!isset($code) || $code == '')
{
	header('Location: index.php');
}
elseif($code == 'fpass')
{
	echo $forgot['password'] . 'test';
	include('forms/forgot_pass.php');
	exit();
}
//CODE 01 is used to send a username AND password reminder
elseif($code == 'fuser')
{
	echo $forgot['username'] . 'test';
	include('forms/forgot_user.php');
	exit();
}
elseif($_POST['submit'] == 'Send Password')
{
	$sql = "SELECT password FROM users WHERE email = '" . $_POST['email'] . "'";
	$query = mysql_query($sql) or die(sql_error());
	$row = mysql_fetch_array($query);

if(mysql_num_rows($query) == 1)
{
	mail($_POST['email'], $forgot['subject1'], $forgot['message1'], $forgot['headers']);
	echo $forgot['pass_sent'];
	exit();
}
else
{
	echo $forgot['email'];
    include('forms/forgot_user.php');
	exit();
}
}
elseif($_POST['submit'] == 'Send Username')
{
	$sql = "SELECT username, password FROM users WHERE email = '" . $_POST['email'] . "'";
	$query = mysql_query($sql) or die(sql_error());
	$row = mysql_fetch_array($query);

if(mysql_num_rows($query) == 1)
{
	mail($_POST['email'], $forgot['subject2'], $forgot['message2'], $forgot['headers']);
	echo $forgot['user_sent'];
	exit();
}
else
{
	echo $forgot['email'];
    include('forms/forgot_user.php');
	exit();
}
}
?>

FORGOT_PASS.PHP:
<form name="forgot_pass" method="post" action="<?php $SERVER['PHP_SELF']; ?>">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td>Email:</td>
<td><input name="email" type="text" size="25" value="<?php echo $POST['email']; ?>"></td>
</tr>
<tr>
<td colspan="2"><input name="submit" type="submit" value="Send Password"></td>
</tr>
</table>
</form>

FORGOT_USER.PHP"

<form name="forgot_user" method="post" action="<?php $SERVER['PHP_SELF']; ?>">
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td>Email:</td>
<td><input name="email" type="text" size="25" value="<?php echo $POST['email']; ?>"></td>
</tr>
<tr>
<td colspan="2"><input name="submit" type="submit" value="Send Username"></td>
</tr>
</table>
</form>

What this code is supposed to do is send a username or password reminder to ther user. What happens is, say I put in reminder.php?code=01 (reminder.php is the page, and code=01 is used to bring up the form to send pass reminder), I'll put my email address in and hit submit, and it will just show me the form again and do nothing. I even put in a WRONG email and it still just reloads to the form... WHY!

[HalfaBee]

This
<?php $_SERVER['PHP_SELF']; ?>
does nothing.
it should have an echo in it.
It will do exactly the same thing because a blank action submits to itself.

HalfaBee

[Sharif]

Well isn't $_SERVER['PHP_SELF'] the same thing as $PHP_SELF ??

[LordShryku]

Yes, but $_SERVER['PHP_SELF'] will work regardless of register_globals. What he's saying is that you need to do an echo $PHP_SELF for it to work

action="<?php $_SERVER['PHP_SELF']; ?>

//needs to be

action="<?php echo $_SERVER['PHP_SELF']; ?>

[HalfaBee]

Yes, but if you don't echo it it doesn't print anything. Have a look at your html for the form ( view source ).

HalfaBee