need help please

yonghan

Hi,I wanna ask.I got a script which was an example of bookmark a site.Here are the codes.But I got trouble with it.When I log in,it says you are logged in as member.But when I want to use the add_bookmarks.php.It says you’re not logged in.Please help me.I attach the files.Thanks a lot.

rincewind456

Not everyone has MS Word on there machine or are willing to download and open .doc files, make the attachment plain text, and more could and probably would look at it.

yonghan

please help me,i cut it into 2 parts.Thanks.here are the code.

-bookmarks.sql
create database bookmarks;

use bookmarks;

create table user (

username varchar(16) primary key,

passwd char(16) not null,

email varchar(100) not null

);

create table bookmark (

username varchar(16) not null,

bm_URL varchar(255) not null,

index (username),

index (bm_URL)

);

grant select, insert, update, delete
on bookmarks.*

to bm_user@localhost identified by 'password';
- Login.php

<?php
require_once('bookmark_fns.php');
do_html_header('');

display_site_info();
display_login_form();

do_html_footer();
?>

db_fns.php

<?php
function db_connect()
{
$result = mysql_pconnect('localhost', 'bm_user', 'password');
if (!$result)
return false;
if (!mysql_select_db('bookmarks'))
return false;

return $result;
}
?>

member.php

<?php
// include function files for this application
require_once('bookmark_fns.php');
session_start();
//create short variable names
$username = $HTTP_POST_VARS['username'];
$passwd = $HTTP_POST_VARS['passwd'];

if ($username && $passwd)
// they have just tried logging in
{
if (login($username, $passwd))
{
// if they are in the database register the user id
$HTTP_SESSION_VARS['valid_user'] = $username;
}

else
{
// unsuccessful login
do_html_header('Problem:');
echo 'You could not be logged in.
You must be logged in to view this page.';
do_html_url('login.php', 'Login');
do_html_footer();
exit;
}

}

do_html_header('Home');
check_valid_user();
// get the bookmarks this user has saved
if ($url_array = get_user_urls($HTTP_SESSION_VARS['valid_user']));
display_user_urls($url_array);

// give menu of options
display_user_menu();

do_html_footer();
?>

output_fns.php

<?php

function do_html_footer()
{
// print an HTML footer
?>
</body>
</html>
<?php
}

function do_html_heading($heading)
{
// print heading
?>
<h2><?php echo $heading;?></h2>
<?php
}

function do_html_URL($url, $name)
{
// output URL as link and br
?>
<br /><a href="<?php echo $url;?>"><?php echo $name;?></a><br />
<?php
}

function display_site_info()
{
// display some marketing info
?>
<ul>
<li>Store your bookmarks online with us!
<li>See what other users use!
<li>Share your favorite links with others!
</ul>
<?php
}

function display_login_form()
{
?>
<a href="register_form.php">Not a member?</a>
<form method=post action="member.php">
<table bgcolor=#cccccc>
<tr>
<td colspan=2>Members log in here:</td>
<tr>
<td>Username:</td>
<td><input type=text name=username></td></tr>
<tr>
<td>Password:</td>
<td><input type=password name=passwd></td></tr>
<tr>
<td colspan=2 align=center>
<input type=submit value="Log in"></td></tr>
<tr>
<td colspan=2><a href="forgot_form.php">Forgot your password?</a></td>
</tr>
</table></form>
<?php
}

function display_registration_form()
{
?>
<form method=post action="register_new.php">
<table bgcolor=#cccccc>
<tr>
<td>Email address:</td>
<td><input type=text name=email size=30 maxlength=100></td></tr>
<tr>
<td>Preferred username <br />(max 16 chars):</td>
<td valign=top><input type=text name=username
size=16 maxlength=16></td></tr>
<tr>
<td>Password <br />(between 6 and 16 chars):</td>
<td valign=top><input type=password name=passwd
size=16 maxlength=16></td></tr>
<tr>
<td>Confirm password:</td>
<td><input type=password name=passwd2 size=16 maxlength=16></td></tr>
<tr>
<td colspan=2 align=center>
<input type=submit value="Register"></td></tr>
</table></form>
<?php

}

function display_user_urls($url_array)
{
//display the table of URLs

// set global variable, so we can test later if this is on the page
global $bm_table;
$bm_table = true;
?>
<br />
<form name=bm_table action="delete_bms.php" method=post>
<table width=300 cellpadding=2 cellspacing=0>
<?php
$color = "#cccccc";
echo "<tr bgcolor=$color><td><strong>Bookmark</strong></td>";
echo "<td><strong>Delete?</strong></td></tr>";
if (is_array($url_array) && count($url_array)>0)
{
foreach ($url_array as $url)
{
if ($color == "#cccccc")
$color = "#ffffff";
else
$color = "#cccccc";
// remember to call htmlspecialchars() when we are displaying user data
echo "<tr bgcolor=$color><td><a href=\"$url\">".htmlspecialchars($url)."</a></td>";
echo "<td><input type=checkbox name=\"del_me[]\"
value=\"$url\"></td>";
echo "</tr>";
}
}
else
echo "<tr><td>No bookmarks on record</td></tr>";
?>
</table>
</form>
<?php
}

function display_user_menu()
{
// display the menu options on this page
?>
<hr />
<a href="member.php">Home</a>  | 
<a href="add_bm_form.php">Add BM</a>  | 
<?php
// only offer the delete option if bookmark table is on this page
global $bm_table;
if($bm_table==true)
echo "<a href='#' onClick='bm_table.submit();'>Delete BM</a> | ";
else
echo "<font color='#cccccc'>Delete BM</font> | ";
?>
<a href="change_passwd_form.php">Change password</a>
<br />
<a href="recommend.php">Recommend URLs to me</a>  | 
<a href="logout.php">Logout</a>
<hr />

<?php
}

function display_add_bm_form()
{
// display the form for people to ener a new bookmark in
?>
<form name=bm_table action="add_bms.php" method=post>
<table width=250 cellpadding=2 cellspacing=0 bgcolor=#cccccc>
<tr><td>New BM:</td><td><input type=text name=new_url value="http://"
size=30 maxlength=255></td></tr>
<tr><td colspan=2 align=center><input type=submit value="Add bookmark"></td></tr>
</table>
</form>
<?php
}

function display_password_form()
{
// display html change password form
?>
<br />
<form action="change_passwd.php" method=post>
<table width=250 cellpadding=2 cellspacing=0 bgcolor=#cccccc>
<tr><td>Old password:</td>
<td><input type=password name=old_passwd size=16 maxlength=16></td>
</tr>
<tr><td>New password:</td>
<td><input type=password name=new_passwd size=16 maxlength=16></td>
</tr>
<tr><td>Repeat new password:</td>
<td><input type=password name=new_passwd2 size=16 maxlength=16></td>
</tr>
<tr><td colspan=2 align=center><input type=submit value="Change password">
</td></tr>
</table>
<br />
<?php
};

function display_forgot_form()
{
// display HTML form to reset and email password
?>
<br />
<form action="forgot_passwd.php" method=post>
<table width=250 cellpadding=2 cellspacing=0 bgcolor=#cccccc>
<tr><td>Enter your username</td>
<td><input type=text name=username size=16 maxlength=16></td>
</tr>
<tr><td colspan=2 align=center><input type=submit value="Change password">
</td></tr>
</table>
<br />
<?php
};

yonghan

user_auth.php

<?php

require_once('db_fns.php');

function register($username, $email, $password)
// register new person with db
// return true or error message
{
// connect to db
$conn = db_connect();
if (!$conn)
return 'Could not connect to database server - please try later.';

// check if username is unique
$result = mysql_query("select * from user where username='$username'");
if (!$result)
return 'Could not execute query';
if (mysql_num_rows($result)>0)
return 'That username is taken - go back and choose another one.';

// if ok, put in db
$result = mysql_query("insert into user values
('$username', password('$password'), '$email')");
if (!$result)
return 'Could not register you in database - please try again later.';

return true;
}

function login($username, $password)
// check username and password with db
// if yes, return true
// else return false
{
// connect to db
$conn = db_connect();
if (!$conn)
return false;

// check if username is unique
$result = mysql_query("select * from user
where username='$username'
and passwd = password('$password')");
if (!$result)
return false;

if (mysql_num_rows($result)>0)
return true;
else
return false;
}

function change_password($username, $old_password, $new_password)
// change password for username/old_password to new_password
// return true or false
{
// if the old password is right
// change their password to new_password and return true
// else return false
if (login($username, $old_password))
{
if (!($conn = db_connect()))
return false;
$result = mysql_query( "update user
set passwd = password('$new_password')
where username = '$username'");
if (!$result)
return false; // not changed
else
return true; // changed successfully
}
else
return false; // old password was wrong
}

function get_random_word($min_length, $max_length)
// grab a random word from dictionary between the two lengths
// and return it
{
// generate a random word
$word = '';
//remember to change this path to suit your system
$dictionary = '/usr/dict/words'; // the ispell dictionary
$fp = fopen($dictionary, 'r');
if(!$fp)
return false;
$size = filesize($dictionary);

// go to a random location in dictionary
srand ((double) microtime() * 1000000);
$rand_location = rand(0, $size);
fseek($fp, $rand_location);

// get the next whole word of the right length in the file
while (strlen($word)< $min_length || strlen($word)>$max_length || strstr($word, "'"))
{

if (feof($fp))

fseek($fp, 0); // if at end, go to start
$word = fgets($fp, 80); // skip first word as it could be partial
$word = fgets($fp, 80); // the potential password
};
$word=trim($word); // trim the trailing \n from fgets
return $word;

}

function reset_password($username)
// set password for username to a random value
// return the new password or false on failure
{
// get a random dictionary word b/w 6 and 13 chars in length
$new_password = get_random_word(6, 13);

if($new_password==false)
return false;
// add a number between 0 and 999 to it
// to make it a slightly better password
srand ((double) microtime() * 1000000);
$rand_number = rand(0, 999);
$new_password .= $rand_number;

// set user's password to this in database or return false
if (!($conn = db_connect()))
return false;
$result = mysql_query( "update user
set passwd = password('$new_password')
where username = '$username'");
if (!$result)
return false; // not changed
else
return $new_password; // changed successfully

}

url_fns.php
<?php
require_once('db_fns.php');

function get_user_urls($username)
{
//extract from the database all the URLs this user has stored
if (!($conn = db_connect()))
return false;
$result = mysql_query( "select bm_URL
from bookmark
where username = '$username'");
if (!$result)
return false;

//create an array of the URLs
$url_array = array();
for ($count = 1; $row = mysql_fetch_row ($result); ++$count)
{
$url_array[$count] = addslashes($row[0]);
}

return $url_array;
}

function add_bm($new_url)
{
// Add new bookmark to the database

echo "Attempting to add ".htmlspecialchars($new_url).'<br />';
global $HTTP_SESSION_VARS;
$valid_user = $HTTP_SESSION_VARS['valid_user'];

if (!($conn = db_connect()))
return false;

// check not a repeat bookmark
$result = mysql_query("select * from bookmark
where username='$valid_user'
and bm_URL='$new_url'");
if ($result && (mysql_num_rows($result)>0))
return false;

// insert the new bookmark
if (!mysql_query( "insert into bookmark values
('$valid_user', '$new_url')"))
return false;

return true;
}

function delete_bm($user, $url)
{
// delete one URL from the database
if (!($conn = db_connect()))
return false;

// delete the bookmark
if (!mysql_query( "delete from bookmark
where username='$user' and bm_url='$url'"))
return false;
return true;

}

function recommend_urls($valid_user, $popularity = 1)
{
// We will provide semi intelligent recomendations to people
// If they have an URL in common with other users, they may like
// other URLs that these people like
if (!($conn = db_connect()))
return false;

// find other matching users
// with an url the same as you

if (!($result = mysql_query("
select distinct(b2.username)
from bookmark b1, bookmark b2
where b1.username='$valid_user'
and b1.username != b2.username
and b1.bm_URL = b2.bm_URL
")))
return false;
if (mysql_num_rows($result)==0)
return false;

// create set of users with urls in common
// for use in IN clause
$row = mysql_fetch_object($result);
$sim_users = "('".($row->username)."'";
while ($row = mysql_fetch_object($result))
{
$sim_users .= ", '".($row->username)."'";
}
$sim_users .= ')';

// create list of user urls
// to avoid replicating ones we already know about
if (!($result = mysql_query("
select bm_URL
from bookmark
where username='$valid_user'")))
return false;

// create set of user urls for use in IN clause
$row = mysql_fetch_object($result);
$user_urls = "('".($row->bm_URL)."'";
while ($row = mysql_fetch_object($result))
{
$user_urls .= ", '".($row->bm_URL)."'";
}
$user_urls .= ')';

// as a simple way of excluding people's private pages, and
// increasing the chance of recommending appealing URLs, we
// specify a minimum popularity level
// if $popularity = 1, then more than one person must have
// an URL before we will recomend it

// find out max number of possible URLs
if (!($result = mysql_query("
select bm_URL
from bookmark
where username in $sim_users
and bm_URL not in $user_urls
group by bm_URL
having count(bm_URL)>$popularity
")))
return false;

if (!($num_urls=mysql_num_rows($result)))
return false;

$urls = array();
// build an array of the relevant urls
for ($count=0; $row = mysql_fetch_object($result); $count++)
{
$urls[$count] = $row->bm_URL;
}
return $urls;
}
?>

Thanks a lot.And help me please.I really need help.