myGully.com

myGully.com (https://mygully.com/index.php)
-   Programmierung (https://mygully.com/forumdisplay.php?f=67)
-   -   PHP Script gibt Fehler aus wo ist er? (https://mygully.com/showthread.php?t=2021106)

fabbi94 03.04.10 12:28
PHP Script gibt Fehler aus wo ist er?
 
Hi habe etwas geändert da ich die neuen werte auch in die DB eingeben will aber wenn ich dass Formular abschiken möchte kommt quarry fehler.
Ich habe schon in der DB die neuen Tabellen angelegt.

Also ich will
kill
voll
asis
serie
tode
einfügen dass input feld hat die gleiche value.

PHP-Code:
<?php
$_language->read_module('myprofile');

if(!$userID) echo $_language->module['not_logged_in'];

else {

    $showerror = '';
    eval ("\$title_myprofile = \"".gettemplate("title_myprofile")."\";");
    echo $title_myprofile;

    if(isset($_POST['submit'])) {
        $nickname = htmlspecialchars(mb_substr(trim($_POST['nickname']), 0, 30));
        if(isset($_POST['mail'])) $mail = $_POST['mail'];
        else $mail="";
        if(isset($_POST['mail_hide'])) $mail_hide = true;
        else $mail_hide = false;
        $usernamenew = mb_substr(trim($_POST['usernamenew']), 0, 30);
        $usertext = $_POST['usertext'];
        $firstname = $_POST['firstname'];
        $lastname = $_POST['lastname'];
        $b_day = $_POST['b_day'];
        $b_month = $_POST['b_month'];
        $b_year = $_POST['b_year'];
        $sex = $_POST['sex'];
        $flag = $_POST['flag'];
        $town = $_POST['town'];
        $icq = $_POST['icq'];
        $icq = str_replace('-','',$icq); // Replace - 
        $about = $_POST['messageabout'];
        $clantag = $_POST['clantag'];
        $clanname = $_POST['clanname'];
        $clanhp = $_POST['clanhp'];
        $clanirc = $_POST['clanirc'];
        $clanhistory = $_POST['clanhistory'];
        $cpu = $_POST['cpu'];
        $mainboard = $_POST['mainboard'];
        $monitor = $_POST['monitor'];
        $ram = $_POST['ram'];
        $graphiccard = $_POST['graphiccard'];
        $soundcard = $_POST['soundcard'];
        $connection = $_POST['connection'];
        $keyboard = $_POST['keyboard'];
        $mouse = $_POST['mouse'];
        $mousepad = $_POST['mousepad'];
        $newsletter = $_POST['newsletter'];
        $homepage = str_replace('http://', '', $_POST['homepage']);
        $pm_mail = $_POST['pm_mail'];
        $avatar = $_FILES['avatar'];
        $userpic = $_FILES['userpic'];
        $language = $_POST['language'];
        $kill = $_POST['kill'];
        $voll= $_POST['voll'];
        $asis = $_POST['asis'];
        $serie = $_POST['serie'];
        $tode = $_POST['tode'];
        $id = $userID;
        
        $error_array = array();
        
        if(isset($_POST['userID']) or isset($_GET['userID']) or $userID=="") die($_language->module['not_logged_in']);

        if(isset($_POST['delavatar'])) {
            $filepath = "./images/avatars/";
            if(file_exists($filepath.$id.'.gif')) @unlink($filepath.$id.'.gif');
            if(file_exists($filepath.$id.'.jpg')) @unlink($filepath.$id.'.jpg');
            if(file_exists($filepath.$id.'.png')) @unlink($filepath.$id.'.png');
            safe_query("UPDATE ".PREFIX."user SET avatar='' WHERE userID='".$id."'");
        }
        if(isset($_POST['deluserpic'])) {
            $filepath = "./images/userpics/";
            if(file_exists($filepath.$id.'.gif')) @unlink($filepath.$id.'.gif');
            if(file_exists($filepath.$id.'.jpg')) @unlink($filepath.$id.'.jpg');
            if(file_exists($filepath.$id.'.png')) @unlink($filepath.$id.'.png');
            safe_query("UPDATE ".PREFIX."user SET userpic='' WHERE userID='".$id."'");
        }

        //avatar
        $filepath = "./images/avatars/";
        if($avatar['name'] != "" or ($_POST['avatar_url'] != "" and $_POST['avatar_url'] != "http://")) {
            if($avatar['name'] != "") {
                move_uploaded_file($avatar['tmp_name'], $filepath.$avatar['name'].".tmp");
            }
            else {
                $avatar['name'] = strrchr($_POST['avatar_url'],"/");
                if(!copy($_POST['avatar_url'],$filepath.$avatar['name'].".tmp")) {
                    $error_array['can_not_copy'] = $_language->module['can_not_copy'];
                }
            }
            if(!array_key_exists('can_not_copy', $error_array))
            {
                @chmod($filepath.$avatar['name'].".tmp", $new_chmod);
                $info = getimagesize($filepath.$avatar['name'].".tmp");
                if($info[0] < 91 && $info[1] < 91) {
                    $pic = '';
                    if($info[2] == 1) $pic=$id.'.gif';
                    elseif($info[2] == 2) $pic=$id.'.jpg';
                    elseif($info[2] == 3) $pic=$id.'.png';
                    if($pic != "") {
                        if(file_exists($filepath.$id.'.gif')) @unlink($filepath.$id.'.gif');
                        if(file_exists($filepath.$id.'.jpg')) @unlink($filepath.$id.'.jpg');
                        if(file_exists($filepath.$id.'.png')) @unlink($filepath.$id.'.png');
                        rename($filepath.$avatar['name'].'.tmp', $filepath.$pic);
                        safe_query("UPDATE ".PREFIX."user SET avatar='".$pic."' WHERE userID='".$id."'");
                    }
                    else {
                        if(unlink($filepath.$avatar['name'].".tmp")) {
                            $error_array[] = $_language->module['invalid_picture-format'];
                        }
                        else {
                            $error_array[] = $_language->module['upload_failed'];
                        }
                    }
                }
                else {
                    @unlink($filepath.$avatar['name'].".tmp");
                    $error_array[] = $_language->module['picture_too_big_avatar'];
                }
            }
        }

        //userpic
        $filepath = "./images/userpics/";
        if($userpic['name'] != "" or ($_POST['userpic_url'] != "" and $_POST['userpic_url'] != "http://")) {
            if($userpic['name'] != "") {
                move_uploaded_file($userpic['tmp_name'], $filepath.$userpic['name'].".tmp");
            } else {
                $userpic['name'] = strrchr($_POST['userpic_url'],"/");
                if(!copy($_POST['userpic_url'],$filepath.$userpic['name'].".tmp")) {
                    $error_array['can_not_copy'] = $_language->module['can_not_copy'];
                }
            }
            if(!array_key_exists('can_not_copy', $error_array))
            {
                @chmod($filepath.$userpic['name'].".tmp", $new_chmod);
                $info = getimagesize($filepath.$userpic['name'].".tmp");
                if($info[0] < 231 && $info[1] < 211) {
                    $pic = '';
                    if($info[2] == 1) $pic=$id.'.gif';
                    elseif($info[2] == 2) $pic=$id.'.jpg';
                    elseif($info[2] == 3) $pic=$id.'.png';
                    if($pic != "") {
                        if(file_exists($filepath.$id.'.gif')) @unlink($filepath.$id.'.gif');
                        if(file_exists($filepath.$id.'.jpg')) @unlink($filepath.$id.'.jpg');
                        if(file_exists($filepath.$id.'.png')) @unlink($filepath.$id.'.png');
                        rename($filepath.$userpic['name'].".tmp", $filepath.$pic);
                        safe_query("UPDATE ".PREFIX."user SET userpic='".$pic."' WHERE userID='".$id."'");
                    }
                    else {
                        if(unlink($filepath.$userpic['name'].".tmp")) {
                            $error_array[] = $_language->module['invalid_picture-format'];
                        }
                        else {
                            $error_array[] = $_language->module['upload_failed'];
                        }
                    }
                }
                else {
                    @unlink($filepath.$userpic['name'].".tmp");
                    $error_array[] = $_language->module['picture_too_big_userpic'];
                }
            }
        }

        $birthday = $b_year.'-'.$b_month.'-'.$b_day;

        $qry = "SELECT userID FROM ".PREFIX."user WHERE username = '".$usernamenew."' AND userID != ".$userID." LIMIT 0,1";
        if(mysql_num_rows(safe_query($qry))) {
            $error_array[] = $_language->module['username_aleady_in_use'];
        }
        
        $qry = "SELECT userID FROM ".PREFIX."user WHERE nickname = '".$nickname."' AND userID!=".$userID." LIMIT 0,1";
        if(mysql_num_rows(safe_query($qry))) {
                $error_array[] = $_language->module['nickname_already_in_use'];
        }

        if(count($error_array)) 
        {
            $fehler=implode('<br />• ', $error_array);
            $showerror = '<div class="errorbox">
              <b>'.$_language->module['errors_there'].':</b><br /><br />
              • '.$fehler.'
            </div>';
        }
        else
        {
            safe_query("UPDATE `".PREFIX."user`
                        SET 
                            nickname='".$nickname."',
                            username='".$usernamenew."',
                            email_hide='".$mail_hide."',
                            firstname='".$firstname."',
                            lastname='".$lastname."',
                            sex='".$sex."',
                            country='".$flag."',
                            town='".$town."',
                            birthday='".$birthday."',
                            icq='".$icq."',
                            usertext='".$usertext."',
                            clantag='".$clantag."',
                            clanname='".$clanname."',
                            clanhp='".$clanhp."',
                            clanirc='".$clanirc."',
                            clanhistory='".$clanhistory."',
                            cpu='".$cpu."',
                            mainboard='".$mainboard."',
                            ram='".$ram."',
                            monitor='".$monitor."',
                            graphiccard='".$graphiccard."',
                            soundcard='".$soundcard."',
                            verbindung='".$connection."',
                            keyboard='".$keyboard."',
                            mouse='".$mouse."',
                            mousepad='".$mousepad."',
                            mailonpm='".$pm_mail."',
                            newsletter='".$newsletter."',
                            homepage='".$homepage."',
                            about='".$about."',
                            language='".$language."',
                            kill='".$kill."',
                            voll='".$voll."',
                            asis='".$asis."',
                            serie='".$serie."',
                            tode='".$tode."',
                        WHERE 
                            userID='".$id."'");
    
            redirect("index.php?site=profile&amp;id=$id", $_language->module['profile_updated'],3);
        }
  }

    if(isset($_GET['action']) AND $_GET['action']=="editpwd") {
    
        $bg1 = BG_1;
        $bg2 = BG_2;
          $bg3 = BG_3;
        $bg4 = BG_4;
        $border = BORDER;
    
        eval("\$myprofile_editpwd = \"".gettemplate("myprofile_editpwd")."\";");
        echo $myprofile_editpwd;

    }    
    
    elseif(isset($_POST['savepwd'])) {

        $oldpwd = $_POST['oldpwd'];
        $pwd1 = $_POST['pwd1'];
        $pwd2 = $_POST['pwd2'];
        $id = $userID;

        $ergebnis = safe_query("SELECT password FROM ".PREFIX."user WHERE userID='".$id."'");
        $ds = mysql_fetch_array($ergebnis);

        if(!(mb_strlen(trim($oldpwd)))) {
            $error = $_language->module['forgot_old_pw'];
            die('<b>ERROR: '.$error.'</b><br /><br /><input type="button" onclick="javas*****:history.back()" value="'.$_language->module['back'].'" />');
        }
        $oldmd5pwd = md5($oldpwd);
        if($oldmd5pwd != $ds['password']) {
            $error = $_language->module['old_pw_not_valid'];
            die('<b>ERROR: '.$error.'</b><br /><br /><input type="button" onclick="javas*****:history.back()" value="'.$_language->module['back'].'" />');
        }
        if($pwd1 == $pwd2) {
            if(!(mb_strlen(trim($pwd1)))) {
                $error = $_language->module['forgot_new_pw'];
                die('<b>ERROR: '.$error.'</b><br /><br /><input type="button" onclick="javas*****:history.back()" value="'.$_language->module['back'].'" />');
            }
        }
        else {
            $error = $_language->module['repeated_pw_not_valid'];
            die('<b>ERROR: '.$error.'</b><br /><br /><input type="button" onclick="javas*****:history.back()" value="'.$_language->module['back'].'" />');
        }
        $newmd5pwd = md5(stripslashes($pwd1));
        safe_query("UPDATE ".PREFIX."user SET password='".$newmd5pwd."' WHERE userID='".$userID."'");

        //logout
        unset($_SESSION['ws_auth']);
        unset($_SESSION['ws_lastlogin']);
        session_destroy();

    redirect('index.php?site=login', $_language->module['pw_changed'],3);

    }    
    
    elseif(isset($_GET['action']) AND $_GET['action']=="editmail") {

        $bg1 = BG_1;
        $bg2 = BG_2;
    $bg3 = BG_3;
        $bg4 = BG_4;
        $border = BORDER;

        eval("\$myprofile_editmail = \"".gettemplate("myprofile_editmail")."\";");
        echo $myprofile_editmail;

    }    
    
    elseif(isset($_POST['savemail'])){

        $activationkey = createkey(20);
        $activationlink = 'http://'.$hp_url.'/index.php?site=register&mailkey='.$activationkey;
        $pwd = $_POST['oldpwd'];
        $mail1 = $_POST['mail1'];
        $mail2 = $_POST['mail2'];

        $ergebnis = safe_query("SELECT password, username FROM ".PREFIX."user WHERE userID='".$userID."'");
        $ds = mysql_fetch_array($ergebnis);
        $username = $ds['username'];
        if(!(mb_strlen(trim($pwd)))) {
            $error = $_language->module['forgot_old_pw'];
            die('<b>ERROR: '.$error.'</b><br /><br /><input type="button" onclick="javas*****:history.back()" value="'.$_language->module['back'].'" />');
        }
        $md5pwd = md5(stripslashes($pwd));
        if($md5pwd != $ds['password']) {
            die('<b>ERROR: '.$error.'</b><br /><br /><input type="button" onclick="javas*****:history.back()" value="'.$_language->module['back'].'" />');
        }
        if($mail1 == $mail2) {
            if(!(mb_strlen(trim($mail1)))) {
                $error = $_language->module['mail_not_valid'];
                die('<b>ERROR: '.$error.'</b><br /><br /><input type="button" onclick="javas*****:history.back()" value="'.$_language->module['back'].'" />');
            }
        }
        else {
            $error = $_language->module['repeated_pw_not_valid'];
            die('<b>ERROR: '.$error.'</b><br /><br /><input type="button" onclick="javas*****:history.back()" value="'.$_language->module['back'].'" />');
        }

        // check e-mail
        
        if(!validate_email($mail1)){ 
            $error=$_language->module['invalid_mail'];
            die('<b>ERROR: '.$error.'</b><br /><br /><input type="button" onclick="javas*****:history.back()" value="'.$_language->module['back'].'" />');
        }
        
        safe_query("UPDATE ".PREFIX."user SET email_change = '".$mail1."', email_activate = '".$activationkey."' WHERE userID='".$userID."'");

        $ToEmail = $mail1;
        $ToName = $username;
        $header =  str_replace(Array('%homepage_url%'), Array($hp_url), $_language->module['mail_subject']);
        $Message = str_replace(Array('%username%', '%activationlink%', '%pagetitle%', '%homepage_url%'), Array($username, $activationlink, $hp_title, $hp_url), $_language->module['mail_text']);

        if(mail($ToEmail,$header, $Message, "From:".$admin_email."\nContent-type: text/plain; charset=utf-8\n")) echo $_language->module['mail_changed'];
        else echo $_language->module['mail_failed'];

    }    
    
    else {
        $ergebnis = safe_query("SELECT * FROM ".PREFIX."user WHERE userID='".$userID."'");
        $anz = mysql_num_rows($ergebnis);
        if($anz) {
            $ds = mysql_fetch_array($ergebnis);
            $flag = '[flag]'.$ds['country'].'[/flag]';
            $country = flags($flag);
            $country = str_replace("<img","<img id='county'",$country);
            $sex = '<option value="m">'.$_language->module['male'].'</option><option value="f">'.$_language->module['female'].'</option><option value="u">'.$_language->module['unknown'].'</option>';
            $sex = str_replace('value="'.$ds['sex'].'"','value="'.$ds['sex'].'" selected="selected"',$sex);
            if($ds['newsletter'] == "1") $newsletter = '<option value="1" selected="selected">'.$_language->module['yes'].'</option><option value="0">'.$_language->module['no'].'</option>';
            else $newsletter = '<option value="1">'.$_language->module['yes'].'</option><option value="0" selected="selected">'.$_language->module['no'].'</option>';
            if($ds['mailonpm'] == "1") $pm_mail = '<option value="1" selected="selected">'.$_language->module['yes'].'</option><option value="0">'.$_language->module['no'].'</option>';
            else $pm_mail = '<option value="1">'.$_language->module['yes'].'</option><option value="0" selected="selected">'.$_language->module['no'].'</option>';
            if($ds['email_hide']) $email_hide = ' checked="checked"';
            else $email_hide = '';
            $b_day = mb_substr($ds['birthday'],8,2);
            $b_month = mb_substr($ds['birthday'],5,2);
            $b_year = mb_substr($ds['birthday'],0,4);
            $countries = str_replace(" selected=\"selected\"", "", $countries);
            $countries = str_replace('value="'.$ds['country'].'"', 'value="'.$ds['country'].'" selected="selected"', $countries);
            if($ds['avatar']) $viewavatar = '• <a href="javas*****:MM_openBrWindow(\'images/avatars/'.$ds['avatar'].'\',\'avatar\',\'width=120,height=120\')">'.$_language->module['avatar'].'</a>';
            else $viewavatar = $_language->module['avatar'];
            if($ds['userpic']) $viewpic = '• <a href="javas*****:MM_openBrWindow(\'images/userpics/'.$ds['userpic'].'\',\'userpic\',\'width=250,height=230\')">'.$_language->module['userpic'].'</a>';
            else $viewpic = $_language->module['userpic'];

            $usertext = getinput($ds['usertext']);
            $clanhistory = clearfromtags($ds['clanhistory']);
            $clanname = clearfromtags($ds['clanname']);
            $clantag = clearfromtags($ds['clantag']);
            $clanirc = clearfromtags($ds['clanirc']);
            $firstname = clearfromtags($ds['firstname']);
            $lastname = clearfromtags($ds['lastname']);
            $town = clearfromtags($ds['town']);
            $cpu = clearfromtags($ds['cpu']);
            $mainboard = clearfromtags($ds['mainboard']);
            $ram = clearfromtags($ds['ram']);
            $monitor = clearfromtags($ds['monitor']);
            $graphiccard = clearfromtags($ds['graphiccard']);
            $soundcard = clearfromtags($ds['soundcard']);
            $connection = clearfromtags($ds['verbindung']);
            $keyboard = clearfromtags($ds['keyboard']);
            $mouse = clearfromtags($ds['mouse']);
            $mousepad = clearfromtags($ds['mousepad']);
            $clanhp = getinput($ds['clanhp']);
            $about = getinput($ds['about']);
            $nickname = $ds['nickname'];
            $username = getinput($ds['username']);
            $email = getinput($ds['email']);
            $icq = getinput($ds['icq']);
            $homepage = getinput($ds['homepage']);
            $kill = getinput($ds['kill']);
            $voll = getinput($ds['voll']);
            $asis = getinput($ds['asis']);
            $serie = getinput($ds['serie']);
            $tode = getinput($ds['tode']);
            $langdirs = '';
            $filepath = "languages/";
            
            // Select all possible languages
            $mysql_langs = array();
            $query = safe_query("SELECT lang, language FROM ".PREFIX."news_languages");
            while($dx = mysql_fetch_assoc($query)){
                $mysql_langs[$dx['lang']] = $dx['language'];
            }
            if($dh = opendir($filepath)) {
                while($file = mb_substr(readdir($dh), 0, 2)) {
                    if($file != "." and $file!=".." and is_dir($filepath.$file)) {
                        if(isset($mysql_langs[$file])){
                            $name = $mysql_langs[$file];
                            $name = ucfirst($name);
                            $langdirs .= '<option value="'.$file.'">'.$name.'</option>';
                        }
                        else {
                            $langdirs .= '<option value="'.$file.'">'.$file.'</option>';
                        }
                    }
                }
                closedir($dh);
            }
            
            if($ds['language']) $langdirs = str_replace('"'.$ds['language'].'"', '"'.$ds['language'].'" selected="selected"', $langdirs);
            else $langdirs = str_replace('"'.$_language->language.'"', '"'.$_language->language.'" selected="selected"', $langdirs);
            
            $bg1 = BG_1;
            $bg2 = BG_2;
            $bg3 = BG_3;
            $bg4 = BG_4;

            eval("\$myprofile = \"".gettemplate("myprofile")."\";");
            echo $myprofile;

        }
        else echo $_language->module['not_logged_in'];
    }
}
?>

baronvonadler 03.04.10 13:22
Es ist immer hilfreich wenn man die Fehlermeldung hat weil dann ist das Prob schon sogut wie gelöscht! Also ich meine die gesamte mit Line etc.

PropheT456 03.04.10 15:00
Das sieht mir stark nach webSPELL aus. Geh mal in die _settings.php und suche die zeile Debug OFF und ersetzte sie durch Debug ON...

Dann mache nocheinmal eine eingabe damit der fehler wiederkommt dann wird er nämlich voll ausgegeben

fabbi94 03.04.10 17:55
jo is webspell. Danke für die schnelle antworten.
Hier die lange fehler variante:

# Query failed: errorno=1064
# error=You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'kill='', voll='', asis='ww', serie='', tode='', ' at line 34
# query=UPDATE `clan_user` SET nickname='[TRIX]Bludi', username='[TRIX]Bludi', email_hide='1', firstname='Fabian', lastname='H', sex='m', country='de', town='Großheubach', birthday='1994-02-13', icq='', usertext='[TRIX]Super-Administrator[flag]de[/flag]', clantag='TRIX', clanname='TRIX', clanhp='hier^^', clanirc='TRIX', clanhistory='TRIX', cpu='AMD Phenom II X4 955 BE', mainboard='Gigabyte UD5P', ram='DDR3 4GB 1666', monitor='Samsung SyncMaster 2494HS', graphiccard='Readon HD 5770', soundcard='Onboard', verbindung='4000er Leitung (DSL)', keyboard='Logitech (Standart)', mouse='Labtec (Standart)', mousepad='IKEA^^', mailonpm='1', newsletter='1', homepage='hier^^', about='', language='de', kill='', voll='', asis='ww', serie='', tode='', WHERE userID='1'

januschka 10.05.10 10:41
Code:
tode='".$tode."',
WHERE userID='".$id."'");
Der Fehler kommt weil du in der UPDATE-Abfrage vor dem WHERE ein Komma hast, nimm einfach das Komma raus. ;)

So ist richtig:

Code:
tode='".$tode."'
WHERE userID='".$id."'");

urga 10.05.10 18:23
also wenn die POST parmeter den selben namen haben wie die spalten der tabelle, würd' ich's so machen:
Code:
$ignore = array ('delavatar', 'deluserpic', '................');
foreach ($_POST as $k => $v) {
 if (! in_array ($k, $ignore)) {
  $update[] = "$k='" . mysql_real_escape_string ($v) . "'";
 }
}
if ($update) {
 $sql = 'update TABLE set ' . implode (',', $update) . " where userID='".$id."'";
}


Alle Zeitangaben in WEZ +1. Es ist jetzt 22:30 Uhr.

Powered by vBulletin® (Deutsch)
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.