Hello Ben,
I was using your simple login non OOB version. I tried to add first name and last name in the memmber table. The form valodation works fine. But data is not inserted in the table. Here is the code:
HTML:
<form action="" method="post">
<div>
<?php if ($error['alert'] != '') {
echo "<div class='alert'>".$error['alert']."</div>"; } ?>
<label for="username">Username: *</label>
<input type="text" name="username" value="<?php echo $input['user']; ?>"><div class="error"><?php echo $error['user']; ?></div>
<label for="firstname">First Name: *</label>
<input type="text" name="firstname" value="<?php echo $input['first']; ?>"><div class="error"><?php echo $error['first']; ?></div>
PHP: Register.php
<?php
/*
* REGISTER.PHP
* Register New Members
*/
// start session / load configs
session_start();
include('includes/config.php');
include('includes/db.php');
/*
* This section below checking if user is logged in/checking for inactivity
* may be best put in a reusable function so it is easily reused/updated
*/
// check that the user is logged in
if (!isset($_SESSION['username']))
{
header("Location: login.php?unauthorized");
}
// check that the user is an admin
else if (!is_admin())
{
header("Location: customers.php");
}
// check for inactivity
if (time() > $_SESSION['last_active'] + $config['session_timeout'])
{
// log out user
session_destroy();
header("Location: login.php?timeout");
}
else
{
// update the session variable
$_SESSION['last_active'] = time();
}
// form defaults
$error['alert'] = '';
$error['user'] = '';
$error['first'] = '';
$error['email'] = '';
$error['type'] = '';
$error['pass'] = '';
$error['pass2'] = '';
$input['user'] = '';
$input['first'] = '';
$input['email'] = '';
$input['type'] = '';
$input['pass'] = '';
$input['pass2'] = '';
if (isset($_POST['submit']))
{
$input['user'] = htmlentities($_POST['username'], ENT_QUOTES);
$input['first'] = htmlentities($_POST['firstname'], ENT_QUOTES);
$input['email'] = htmlentities($_POST['email'], ENT_QUOTES);
$input['type'] = htmlentities($_POST['type'], ENT_QUOTES);
$input['pass'] = htmlentities($_POST['password'], ENT_QUOTES);
$input['pass2'] = htmlentities($_POST['password2'], ENT_QUOTES);
// create select options
$select = '<option value="">Select an option</option>';
$stmt = $mysqli->prepare("SELECT id, name FROM customerstype");
$stmt->execute();
$stmt->bind_result($id, $name); // for more information, see http://www.php.net/manual/en/mysqli-stmt.bind-result.php
while ($stmt->fetch())
{
$select .= "<option value='" . $id . "'";
if ($input['type'] == $id) { $select .= "selected='selected'"; }
$select .= ">" . $name . "</option>";
}
$stmt->close();
// process form
if ($_POST['username'] == '' || $_POST['firstname'] == '' || $_POST['password'] == '' || $_POST['password2'] == '' || $_POST['email'] == '' || $_POST['type'] == '')
{
// both fields need to be filled in
if ($_POST['username'] == '') { $error['user'] = 'required!'; }
if ($_POST['fisrtname'] == '') { $error['first'] = 'required!'; }
if ($_POST['email'] == '') { $error['email'] = 'required!'; }
if ($_POST['type'] == '') { $error['type'] = 'required!'; }
if ($_POST['password'] == '') { $error['pass'] = 'required!'; }
if ($_POST['password2'] == '') { $error['pass2'] = 'required!'; }
$error['alert'] = 'Please fill in required fields!';
// show form
include('views/v_register.php');
}
else if ($_POST['password'] != $_POST['password2'])
{
// both password fields need to match
$error['alert'] = 'Password fields must match!';
// show form
include('views/v_register.php');
}
else if (!preg_match('/^([0-9a-zA-Z]([-.\w]*[0-9a-zA-Z])*@([0-9a-zA-Z][-\w]*[0-9a-zA-Z]\.)+[a-zA-Z]{2,9})$/', $input['email']))
{
// email is invalid
$error['email'] = "Please enter a valid email!";
// display form
include('views/v_register.php');
}
else
{
// check if the email is taken
$check = $mysqli->prepare("SELECT email FROM customers WHERE email = ?");
$check->bind_param("s", $input['email']);
$check->execute();
$check->store_result();
if ($check->num_rows != 0)
{
// email is already in use
$error['alert'] = "This email is already in use. Please choose a different email address.";
$error['email'] = "Please choose a different email address.";
// show form
include('views/v_register.php');
exit;
}
// check if the username is taken
$check = $mysqli->prepare("SELECT username FROM customers WHERE username = ?");
$check->bind_param("s", $input['user']);
$check->execute();
$check->store_result();
if ($check->num_rows != 0)
{
// username is already in use
$error['alert'] = "This username is already in use. Please choose a different username.";
$error['user'] = "Please choose a different username.";
// show form
include('views/v_register.php');
exit;
}
// insert into database
if ($stmt = $mysqli->prepare("INSERT customers (username, firstname, email, type, password) VALUES (?,?,?,?,?)"))
{
$stmt->bind_param("ssss", $input['user'], $input['firstname'], $input['email'], $input['type'], md5($input['pass'] . $config['salt']));
$stmt->execute();
$stmt->close();
// add alert and clear form values
$error['alert'] = 'Member added successfully!';
$input['user'] = '';
$input['first'] = '';
$input['email'] = '';
$input['type'] = '';
$input['pass'] = '';
$input['pass2'] = '';
// show form
include('views/v_register.php');
}
else
{
echo "ERROR: Could not prepare MySQLi statement. in customer insert";
}
}
}
else
{
// create select options
$select = '<option value="">Select an option</option';
$stmt = $mysqli->prepare("SELECT id, name FROM customerstype");
$stmt->execute();
$stmt->bind_result($id, $name);
while ($stmt->fetch())
{
$select .= "<option value='" . $id . "'>" . $name . "</option>";
}
$stmt->close();
// show form
include('views/v_register.php');
}
// close db connection
$mysqli->close();
?>
I modified the database by adding another field for first name. I can manually insert the first name but it cannot insert the firstname from the form. Any idea. I am with fatcow.com for webhosting.
Thanks,
Mahfuz
