Unsolved Mystery

[mrxila]

Hello everyone.... this is my first post here at PHP Builder.

I've been working with PHP for a while now but at the moment I'm having trouble and I need some help from some people smarter than me 🙂

First, this script is supposed to post XML data and receive a response. Simple.

Second, it was working fine on my previous host (PHP4), now I have a new host (PHP5) and it loads to a blank page, no error, no nothing. I've checked with my new host and Curl is supported and they are for sure using PHP5.

Here's the code:

Any help is appreciated, it's actually a really urgent matter that I get this working.

<?
if ($SuperServiceNumber > "") {

// Suspend the customer service and place on DEACTIATED status

$XPost = "<?xml version='1.0' encoding='UTF-8'?>";
$XPost .= "<ProvisionRequest xmlns=\"http://tempuri.org/ProvisionRequest.xsd\">";
$XPost .= "<Credentials>";
$XPost .= "<Token>397710</Token>";
$XPost .= "<TokenKey>89s3l1er?</TokenKey>";
$XPost .= "</Credentials>";
$XPost .= "<DisconnectService>";
$XPost .= "<ServiceNumber>$SuperServiceNumber</ServiceNumber>";
$XPost .= "</DisconnectService>";
$XPost .= "</ProvisionRequest>";

$url = "https://exampleurx.com/Provison.asmx"; // enter the URL to post to here
$ch = curl_init();    // initialize curl handle 
curl_setopt($ch, CURLOPT_URL,$url); // set url to post to 
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1); // return into a variable 
curl_setopt($ch, CURLOPT_HEADER, 1);  // capture the returned headers
curl_setopt($ch, CURLOPT_TIMEOUT, 100); // times out
curl_setopt($ch, CURLOPT_POSTFIELDS, $XPost); // add POST fields 
$runit = curl_exec($ch); // run the whole process 
$message = preg_replace('/[^0-9]/', '', $message);
echo $runit;
echo $message;
}
?>

[NogDog]

First, start by using the "<?php" tag instead of the short_open_tag "<?", in case it has been disabled on your new host.

Second, where does $SuperServiceNumber get set? If it comes from form data or a URL query string, your host may (correctly) have register_globals turned off. If so, you'll need to instead reference $POST['SuperServiceNumber'] if it comes from a post method form or $GET['SuperServiceNumber'] if it comes from a get method form or a URL query string, or if it is a session variable, then $_SESSION['SuperServiceNumber'].

[mrxila]

NogDog wrote:

First, start by using the "<?php" tag instead of the short_open_tag "<?", in case it has been disabled on your new host.

Second, where does $SuperServiceNumber get set? If it comes from form data or a URL query string, your host may (correctly) have register_globals turned off. If so, you'll need to instead reference $POST['SuperServiceNumber'] if it comes from a post method form or $GET['SuperServiceNumber'] if it comes from a get method form or a URL query string, or if it is a session variable, then $_SESSION['SuperServiceNumber'].

NogDog, thanks for that info.

I changed the opening tag to "<?php" not sure why I didn't catch that. On our server Register Globals is actually "On" so for that issue there is no issue (I don't think).

So, with that said I uploaded the script after adding "<?php" and got the same blank page.

[mrxila]

This is what my host said about this issue, I have no idea what it means:

XML-rpc module is installed and compiled with php in the server. It is remote procedure calling using HTTP as the transport and XML as the encoding. I hope, this is what is required for the code you are using.

[rgermain]

I would make sure that error_reporting hasn't been turned off.

I would put this at the top of my .php pages just make sure that isn't passing an error you can't see.

error_reporting(E_ALL);

[laserlight]

Set display_errors to On and error_reporting to E_ALL to help you debug.

$SuperServiceNumber > "" should probably be !empty($SuperServiceNumber). I note that $message was not defined:

$message = preg_replace('/[^0-9]/', '', $message);

On our server Register Globals is actually "On" so for that issue there is no issue (I don't think).

It still may be security issue, you should not be relying on register_globals being On.

[mrxila]

I added error_reporting to E_ALL and the only errors it returned was "undefined" on $message. I fixed that so now there are no more errors.

One thing I did notice is that the page itself is taking a longer time to load now, which would imply it was doing something but maybe not.

A link to the page itself on the server

So does the code look right ?

This is so confusing with no errors at all I really don't understand.

[laserlight]

So does the code look right ?

We cannot see the code, of course (if we could it means that PHP isnt working on your server).

[mrxila]

Oh I know you cant see the code, I meant the original code that I posted when I was asking if it looked right!

[laserlight]

I meant the original code that I posted when I was asking if it looked right!

Since we already pointed out possible problems in your original code, it might better to post the updated code for critique.

[mrxila]

Here is the updated code.....😉

<? $SuperServiceNumber = $_REQUEST['SuperServiceNumber']; ?>
<?php echo $pf_date ?>
<?php
if ($SuperServiceNumber == "") {
// Suspend the customer service and place on DEACTIATED status
error_reporting(E_ALL);
$XPost = "<?xml version='1.0' encoding='UTF-8'?>";
$XPost .= "<ProvisionRequest xmlns=\"http://tempuri.org/ProvisionRequest.xsd\">";
$XPost .= "<Credentials>";
$XPost .= "<Token>39809</Token>";
$XPost .= "<TokenKey>9888jjj</TokenKey>";
$XPost .= "</Credentials>";
$XPost .= "<DisconnectService>";
$XPost .= "<ServiceNumber>$SuperServiceNumber</ServiceNumber>";
$XPost .= "</DisconnectService>";
$XPost .= "</ProvisionRequest>";

$url = "https://orders.testsite.net/osiriswebservice/schema/v1/osirisrequest.xsd"; // enter the URL to post to here
$ch = curl_init();    // initialize curl handle 
curl_setopt($ch, CURLOPT_URL,$url); // set url to post to 
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1); // return into a variable 
curl_setopt($ch, CURLOPT_HEADER, 1);  // capture the returned headers
curl_setopt($ch, CURLOPT_TIMEOUT, 100); // times out after 4s 
curl_setopt($ch, CURLOPT_POSTFIELDS, $XPost); // add POST fields 
$runit = curl_exec($ch); // run the whole process 
$message = preg_replace('/[^0-9]/', '', $runit);
echo $runit;
echo $message;
echo $SuperServiceNumber;
}
?>
<?php echo $runit ?>

[rgermain]

I missed this the first time I posted...

One - Errors are not being displayed....

error_reporting(E_ALL) - Goes at the very top of the page!

You should be getting a parse error..

Don't open and close tags so much.

Try this:

<?php
error_reporting(E_ALL);
$SuperServiceNumber = $_REQUEST['SuperServiceNumber'];

echo $pf_date

if ($SuperServiceNumber == "") {
// Suspend the customer service and place on DEACTIATED status

$XPost = "<?xml version='1.0' encoding='UTF-8'?>";
$XPost .= "<ProvisionRequest xmlns=\"http://tempuri.org/ProvisionRequest.xsd\">";
$XPost .= "<Credentials>";
$XPost .= "<Token>39809</Token>";
$XPost .= "<TokenKey>9888jjj</TokenKey>";
$XPost .= "</Credentials>";
$XPost .= "<DisconnectService>";
$XPost .= "<ServiceNumber>$SuperServiceNumber</ServiceNumber>";
$XPost .= "</DisconnectService>";
$XPost .= "</ProvisionRequest>";

$url = "https://orders.testsite.net/osiriswebservice/schema/v1/osirisrequest.xsd"; // enter the URL to post to here
$ch = curl_init();    // initialize curl handle
curl_setopt($ch, CURLOPT_URL,$url); // set url to post to
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1); // return into a variable
curl_setopt($ch, CURLOPT_HEADER, 1);  // capture the returned headers
curl_setopt($ch, CURLOPT_TIMEOUT, 100); // times out after 4s
curl_setopt($ch, CURLOPT_POSTFIELDS, $XPost); // add POST fields
$runit = curl_exec($ch); // run the whole process
$message = preg_replace('/[^0-9]/', '', $runit);
echo $runit;
echo $message;
echo $SuperServiceNumber;
}

echo $runit 
?>

I left the parse error in there so you can see that there was an error the whole time.

[mrxila]

rgermain, thanks!

I think you might have got me somewhere . . .

I took the exact script you provided and copy pasted, replaced the actual POST URL with the URL of the web service.

The page is at:

http://manager.xilatelecom.com/testpost3.php

Here is the error I got:

Parse error: syntax error, unexpected T_IF, expecting ',' or ';' in /home/xila2/public_html/manager/testpost3.php on line 7

So, I took off the if statement and now I get this error:

http://manager.xilatelecom.com/testpost4.php

[NogDog]

You got the unexpected if error because of a missing semi-colon:

<?php
error_reporting(E_ALL);
$SuperServiceNumber = $_REQUEST['SuperServiceNumber'];

echo $pf_date[color=red][b];[/b][/color]   // <--- this line

if ($SuperServiceNumber == "") { 

[rgermain]

Ok, when you get an error you need to look above and below where the actual error is. Use the code I supplied again and this time add the ; to line right before the if statement.

Need to think like the parser and understand what it is trying to tell you...

Parse error: syntax error, unexpected T_IF, expecting ',' or ';' in /home/xila2/public_html/manager/testpost3.php on line 7

Its saying hey, I am on this line ok, now I should see a ; ok I don't well I will keep going oopss... How come I ran into an if statement, this can't be right.

So it was expecting a ; on the line of code above the if statement. Which in your case I would believe to be line 5.

Let me know how it goes.

[mrxila]

I really appreciate everyones help so far.

This is where I'm at now.

I got the sytax error fixed by adding the ;

I actually took out the entire pf_date line because it was not needed.

---

At this point I'm getting the blank page, no errors. But I wanted to mention something.

When I first tried the script the line 7 in my php code looked like this:

$XPost .= "<?xml version='1.0' encoding='UTF-8'?>";

After running this I got an error: XPost not defined.

I changed it to:

$XPost = "<?xml version='1.0' encoding='UTF-8'?>";

This makes it look like the rest with the "." before the "=" sign. Now im not getting an error but I'm wondering is it even posting the XML data.

So to be clear I'm still getting a blank page:

Test Page: http://manager.xilatelecom.com/testpost4.php?SuperServiceNumber=28377377

My question:

Does anyone know of a method to do what I'm trying to do with a different script maybe? A different method? For some reason I dont see this one working anytime soon.

[Weedpacket]

I'm curious about one thing:

if($SuperServiceNumber == "") {

It just seems a little odd that you use this variable in the XML, and echo its value later, only when you already know that it contains an empty string. What do you do if it's not empty?

[mrxila]

Actually thats from when I was using the same script on my old host. I can take it off but it's really just for verification.

If there is no $SuperServiceNumber the user hacked into the system because that session variable would be always populated.

Weedpacket wrote:

I'm curious about one thing:

if($SuperServiceNumber == "") {

It just seems a little odd that you use this variable in the XML, and echo its value later, only when you already know that it contains an empty string. What do you do if it's not empty?

[HalfaBee]

Isn't that where the problem lies?
The code is not executed when $superServiceNumber is set.

[mrxila]

No,

$SuperServiceNumber is not the issue. It's easy to test this because you can just not pass the variable at all.

testpost4.php?SuperServiceNumber=