Help me check the PHP code ... (Post , MYSQL , PHP)

Discussion in 'PHP' started by xDragonZ, Jan 22, 2011.

  1. #1
    Hello guys ,
    Anyone can help me check what problem? or error in this code? can anyone help me clean or fix it? because when user register an account , the data won't store at the MySQL. ( i think some time it will store but most or the time it wont store the post date into MySQL)


    <?php
    session_start();
    if (isset($_COOKIE["ScriptName_user"]) && isset($_COOKIE["ScriptName_pass"]))
    { ?>
    	<META HTTP-EQUIV="REFRESH" CONTENT="0;URL=?p=account">
        <?php 
    	exit();} 
    	if ($_POST['username']){
    		$username = $_POST['username'];
    		if (!empty($_REQUEST['captcha'])) 
    {
    		if (empty($_SESSION['captcha']) || trim(strtolower($_REQUEST['captcha'])) != $_SESSION['captcha'])
    
    			$display_error = "* Security Code Error"; // error language
    			include ('error.php');
    			exit();
    		}else{
    			include('includes/config.php');
    			
    			$name = $_POST["name"];
    			$username = $_POST["username"];
    			$password = $_POST["password"];
    			$cpassword = $_POST["cpassword"];
    			$email = $_POST["email"];
    			$cemail = $_POST["cemail"];
    			$pemail = $_POST["pemail"];
    			$country = $_POST["country"];
    			$paymentmethod = $_POST["paymentmethod"];
    
    			if ($name==NULL|$username==NULL|$password==NULL|$cpassword==NULL|$email==NULL|$cemail==NULL|$pemail==NULL|$country==NULL){
    				$display_error = "* All fields are required"; // error language
    				include ('error.php');
    				exit();
    			}else{
    				$name = uc($name);
    				$username = uc($username);
    				$password = uc($password);
    				$cpassword = uc($cpassword);
    				$email = limpiar($email);
    				$cemail = limpiar($cemail);
    				$pemail = limpiar($pemail);
    				$paymentmethod = limpiar($paymentmethod);
    				$country = limpiar($country);
    
    				$username=limitatexto($username,15);
    				$password=limitatexto($password,15);
    				$cpassword=limitatexto($cpassword,15);
    				$email=limitatexto($email,100);
    				$cemail=limitatexto($cemail,100);
    				$pemail=limitatexto($pemail,100);
    				$country=limitatexto($country,150);
    
    				minimo($username);
    				minimopass($password);
    
    				if ($password!=$cpassword) {
    					$display_error = "* Passwords Do Not Match"; // error language
    					include ('error.php');
    					exit();
    				}else{
    					if ($email!=$cemail) {
    						$display_error = "* Emails Do not Match"; // error language
    						include ('error.php');
    						exit();
    					}else{
    						ValidaMail($email);
    						ValidaMail($pemail);
    
    						$laip = getRealIP();
    						if($laip!="127.0.0.1"){
    							$myDb->connect();
    								$checkip = mysql_query("SELECT ip FROM ScriptName_users WHERE ip='$laip'");
    								$ip_exist = mysql_num_rows($checkip);
    							$myDb->close();
    						}
    						if ($ip_exist>0) {
    							include ('header.php');
    							$display_error = "* You have already created an account"; // error language
    							include ('error.php');
    							exit();
    						}else{
    							$myDb->connect();
    								$checkuser = mysql_query("SELECT username FROM ScriptName_users WHERE username='$username'");
    								$userScriptName_exist = mysql_num_rows($checkuser);
    								$checkemail = mysql_query("SELECT email FROM ScriptName_users WHERE email='$email'");
    								$email_exist = mysql_num_rows($checkemail);
    								$checkpemail = mysql_query("SELECT pemail FROM ScriptName_users WHERE pemail='$pemail'");
    								$pemail_exist = mysql_num_rows($checkpemail);
    							$myDb->close();
    							if ($email_exist>0|$userScriptName_exist>0) {
    								$display_error = "* Username or Email Already in Use"; // error language
    								include ('error.php');
    								exit();
    							}else{
    								if ($pemail_exist>0) {
    									$display_error = "* Your Email is Already in Use"; // error language
    									include ('error.php');
    									exit();
    								}else{
    									if ($_POST["DATA1"] != "") {
    										$DATA1 = limpiar($_POST["DATA1"]);
    										$DATA1=limitatexto($DATA1,15);
    										$myDb->connect();	
    											$checkref = mysql_query("SELECT username FROM ScriptName_users WHERE username='$DATA1'");
    											$DATA1_exist = mysql_num_rows($checkref);
    										$myDb->close();
    										if ($DATA1_exist<1) {
    											$display_error = "* The DATA1 you entered doesn't exist"; // error language
    											include ('error.php');
    											exit();
    										}else{
    											$myDb->connect();
    												$sqlz = "SELECT * FROM ScriptName_users WHERE username='$DATA1'";
    												$resultz = mysql_query($sqlz);        
    												$myrowz = mysql_fetch_array($resultz);
    											$myDb->close();
    											$numero=$myrowz["DATAS1"];
    											$myDb->connect();
    												$sqlex = "UPDATE ScriptName_users SET DATAS1='$numero' +1 WHERE username='$DATA1'";
    												$resultex = mysql_query($sqlex);
    											$myDb->close();
    										}
    									}
    									$joindate = date("F j, Y");
    									$pass = sha1($password);
    									$myDb->connect();
    									$query = "INSERT INTO ScriptName_users (name, username, password, ip, email, pemail, DATA1, country, joindate, paymentmethod) VALUES('$name','$username','$pass','$laip','$email','$pemail','$DATA1','$country','$joindate', '$paymentmethod')";
    										mysql_query($query) or die(mysql_error());
    									$myDb->close();
    									$display_error = "* You have been registered correctly <b>$username</b>. Now you can <a href=\"login.php\">login</a>."; // error language
    									include ('error.php');
    									exit();
    									}
    								}
    							}
    						}
    					}
    				}
    			}
    		}else{
    include ('header.php');
     ?>
    HTML CODE HERE... (TRIMMED)
    PHP:

     
    xDragonZ, Jan 22, 2011 IP
  2. Alex Roxon

    Alex Roxon Active Member

    Messages:
    424
    Likes Received:
    11
    Best Answers:
    7
    Trophy Points:
    80
    #2
    You're not going to get much assistance if you post a large block of code like that and just tell us it's not working. If you don't have time to properly go through it, why would we?

    Is it outputting an error? Try throwing an exit statement to detect if the queries fail:

    mysql_query('blah') or die( mysql_error() );
    PHP:
     
    Alex Roxon, Jan 22, 2011 IP
  3. G3n3s!s

    G3n3s!s Active Member

    Messages:
    325
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    80
    #3
    change all your

    mysql_query($sqlz);

    to

    mysql_query($sqlz) or die(mysql_error());

    as Alex told and see errors
     
    G3n3s!s, Jan 22, 2011 IP