mysqli is installed
Connection Established Successfully function setlang() { if ( !empty($_GET['language']) ) { echo "cookie IKKE sat"; $lang = $_GET['language']; echo "LA " . $lang; if ($lang=='da') { $_COOKIE['language'] = 'da'; } if ($lang=='en') { $_COOKIE['language'] = 'en'; } if ($lang=='de') { $_COOKIE['language'] = 'de'; } // $_COOKIE['language'] = $_GET['language'] === 'da' ? 'da' ? 'de' : 'da'; } else { // echo "cookie sat"; $_COOKIE['language'] = 'da'; } } function checkpost ($post){ // check hvis $_POST = '' if(!empty($post)) { return $post; } else { return '0'; } } function sek($dato,$f,$bilag,$kontonavn,$kontolb,$kontoid,$konto,$amount){ //SAVE TEXTFILE $myfile = fopen("asek.txt", "a") or die("Unable to open file!"); $txt = "\n".$dato. " " .$f." ".$bilag." ".$kontonavn." ".$kontolb." ".$kontoid." "." ".$konto." ".$amount."\n"; echo "
"; fwrite($myfile, $txt); fclose($myfile); //SAVE TEXTFILE END } function kontofinans($bilag, $kontonr, $kontolb, $kontoid, $dkf, $dato, $periode, $tekst, $tekstref, $beloebvaluta, $beloebdkr, $momskd, $ordernr, $tnr){ $sql = "INSERT INTO kontofinans (bilag, kontonr, kontolb, kontoid, dkf, dato, periode, tekst, tekstref, beloebvaluta , beloebdkr, momskd, tnr) VALUES('$bilag','$kontonr', '$kontolb','$kontoid','$dkf','$dato','$periode','$stekst','$stekstref','$beloebvaluta','$beloebdkr','$momskd','$tnr')"; if(!$update=mysqli_query($con, $sql)); { $return = mysql_error(); } } function account($kontolb, $amount){ $result = mysqli_query($con, "SELECT * FROM konto WHERE kontolb = '$kontolb'"); $row = mysqli_fetch_assoc($result); $prim = $row['primo']; $sp = $row['spost']; $spos = $sp + $amount; $kontosaldo = $prim + $spos; // echo "
"; // echo "KONTOLB " . $kontolb; // echo "
"; // echo " Primo " .$prim . " primpost " . $sp . " spost " . $spos . " Saldo " . $kontosaldo; // echo "
"; $sql = "update konto set spost='$spos' where kontolb='$kontolb'"; //update konto as saved $ressql=mysqli_query($con, $sql); $sql2 = "update konto set kontosaldo='$kontosaldo' where kontolb='$kontolb'"; //update konto as saved $ressql2=mysqli_query($sql2); // $sql3 = "update konto set primo50='$spos', perprimo='$amount' where kontolb=$kontolb"; //update konto as saved // $ressql3=mysqli_query($sql3); } function accountkre($creditornr, $amount){ $result = mysqli_query($con, "SELECT * FROM creditor WHERE creditornr = '$creditornr'"); $row = mysqli_fetch_assoc($result); $saldo = $row['saldo']; $saldo = $saldo + $amount; $ssql = "UPDATE creditor SET saldo='$saldo' WHERE creditornr='$creditornr'"; $resultssql = mysqli_query($con, $ssql) or die(mysql_error()); } function accountdeb($kundelb, $amount){ $date = date("Y-m-d H:i:s"); $result = mysqli_query($con, "SELECT * FROM kunder WHERE kundelb = '$kundelb'"); $row = mysqli_fetch_assoc($result); $saldo = $row['saldo']; echo "SALDO" . $saldo; $sald = $saldo + $amount; $ssql = "UPDATE kunder SET saldo='$sald', rettet='$date' WHERE kundelb='$kundelb'"; $resultssql = mysqli_query($con, $ssql) or die(mysql_error()); //exit; } function checkenter($prg){ if (isset($_SESSION['username'])){ $username=$_SESSION['username']; $con = new mysqli("localhost","admin",'fhs36x56',"bbutik"); if($con->connect_error){ die("connection failed:" .$con->connect_error); } $s0 = mysqli_query($con, "select * from authorize WHERE username = '$username'"); // $num0 = mysqli_num_rows($s0); while($r0 = mysqli_fetch_assoc($s0)) { $customerno = $r0['customerno']; } $s1 = mysqli_query($con, "select * from tblmatrixmenu WHERE tblprogram = '$prg'"); $num1 = mysqli_num_rows($s1); while($r1 = mysqli_fetch_assoc($s1)) { $tablenumber = $r1['tblnumber']; } $s2 = mysqli_query($con, "SELECT * FROM tblmatrix WHERE medarbejdernr = '$customerno' AND ckbox ='$tablenumber'"); $num2 = mysqli_num_rows($s2); while($r2 = mysqli_fetch_array($s2)){ $matrixvalue = $r2['matrixvalue']; if ($matrixvalue == '0') { echo '

Du har ikke adgang her - kontakt admin

'; exit; } } } } function addDayswithdate($date,$days){ $newdate = date('d-m-Y', strtotime($date) + strtotime("+$days day", 0)); return $newdate; } function mod10($docnum){ // make sure there is just numbers in $docnum $docnum = preg_replace("/[^0-9]/","",$docnum); // change order of values to use in foreach $vals = array_reverse(str_split($docnum)); // multiply every other value by 2 $mult = true; foreach($vals as $k => $v){ $vals[$k] = $mult ? $v*2: $v; $vals[$k] = (string)($vals[$k]); $mult = !$mult; } // checks for two digits (>9) // $mp = array_map(function($v){ // return ($v > 9) ? $v[0] + $v[1] : $v; // }, $vals); // adds the values $sum = array_sum($mp); //gets the mod $md = $sum % 10; // checks how much for 10 $result = 10 - $md; // returns the value return $result; } function delete_cookie() { setcookie("language", "", time()-3600); } function change_password($username, $old_passwd, $new_passwd, $email) // change password for username/old_passwd to new_passwd // return true or false { // if the old password and email are correct! // change their password to new_passwd and return true // else return false $date = date("Y-m-d H:i:s"); $q = "SELECT * from authorize where username='$username' and password = md5('$old_passwd')"; $result = mysqli_query($con, $q); $q = mysqli_num_rows($result); if ($q>0) { $row = mysqli_fetch_array($result); $mail = $row['email']; echo $mail; if ($email==$mail){ $crypted_new_passwd = md5($new_passwd); $ssql = "UPDATE authorize SET password='$crypted_new_passwd' WHERE username='$username'"; echo $ssql; if(!$update=mysqli_query($con, $ssql)); { echo mysql_error(); return "succes"; } } else { return "email"; } } } function reset_password($username, $email) // set password for username to a random value // return the new password or false on failure { global $db_link; $result = wrap_db_query("SELECT email FROM " . DB_TABLE . " WHERE username='" . wrap_db_escape_string($username) . "'"); if (!$result) { return false; // no result } else if (wrap_db_num_rows($result)==0) { return false; // username not in db } else { $fields = wrap_db_fetch_array($result); if ($email != $fields['email']) { return false; // emails do not match } } $new_passwd = random_password(6); // crypt user password entry $crypted_new_passwd = crypt_password($new_passwd); // set user's password to this in database or return false $result = wrap_db_query("UPDATE " . BOOKING_USER_TABLE . " SET passwd = '" . wrap_db_escape_string($crypted_new_passwd) . "' " . "WHERE username = '" . wrap_db_escape_string($username) . "' AND email = '" . wrap_db_escape_string($email) . "'"); if (!$result) { return false; // not changed } else { return $new_passwd; // changed successfully } } function wrap_session_is_registered($variable) { return isset($_SESSION[$variable]); } function wrap_session_register($name, $variable = '') { $_SESSION[$name] = $variable; } function wrap_db_num_rows($db_query) { @ $result = mysqli_num_rows($db_query); return $result; } function get_user_information($username) // return the user information array or false on failure { $result = mysqli_query($con, "SELECT * FROM " . DB_TABLE . " WHERE username = '" . $username . "'"); if (!$result) { return false; // not changed } else if (mysqli_num_rows($result)==0) { return false; // email not in db } else { $fields = mysqli_fetch_array($result); } return $fields; } function generateRandomString($length = 10) { return substr(str_shuffle(str_repeat($x='0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ', ceil($length/strlen($x)) )),1,$length); } function register($username, $password, $firstname, $lastname, $firmname, $address, $housenumber, $zip, $city, $country, $phonehome, $email, $redirect){ // register new person with db // return false or error $res = mysqli_query($con, "SELECT * from stamdatanummerserie WHERE defper = '1' "); $row = mysqli_fetch_assoc($res); $periode = $row['stamdataper']; $knr = $row['customerno']; $knr = $knr+1; $sql = "update stamdatanummerserie set customerno='$knr' where stamdataper='$periode'"; $update=mysqli_query($con, $sql) or die(mysql_error()); $date = date("Y-m-d H:i:s"); $result = mysqli_query($con, "SELECT * FROM authorize where username = '$username'"); if (!$result) return "1"; if (mysqli_num_rows($result)>0) return "2"; $pas = md5($passwd); $ssql = "INSERT INTO authorize (customerno, firstname, lastname, username, password, pchange, address, housenumber, zip, city, country, phonehome, email, redirect, verified, created) VALUES ('$knr', '$firstname','$lastname','$username', md5('$password'), '1', '$address','$housenumber','$zip','$city','$country','$phonehome','$email', '$redirect', '1', '$date')" or die(mysql_error()); $update2=mysqli_query($con, $ssql); //SAVE TEXTFILE $myfile = fopen("kunder.txt", "a") or die("Unable to open file!"); $txt = $date." ".$knr." ".$firstname." ".$lastname." ".$username." ".$password." ".$address." ".$housenumber." ".$zip." ".$city." ".$phonehome." ".$email. "/n"; fwrite($myfile, $txt); fclose($myfile); //SAVE TEXTFILE END $sql = "INSERT INTO kunder (knr, businessname, firstname, lastname , adresse, husnr, postdistrikt, bynavn, land, telefon, email, momskd, betal, primosaldo, saldo, prisgruppe,oprettet,rettet, rettetaf) VALUES ('$knr','$businessname', '$firstname','$lastname','$address','$housenumber', '$zip', '$city', '$country','$phonehome','$email', '2', '1', '0', '0', '1', '$date', '$date', 'web')" or die(mysql_error()); $update3=mysqli_query($con, $sql) or die(mysql_error()); if($update3) return "succes"; } function update_user_information($username, $firstname, $lastname, $address, $housenumber, $zip, $city, $country, $phonehome, $email){ // register new person with db // return false or error $date = date("Y/m/d"); $result = mysqli_query($con, "SELECT * FROM authorize where username = '$username'"); // echo "USER ". $username; $num = mysqli_num_rows($result); //echo "Antal1 " . $num; if ($num != 0) $ssql = "UPDATE authorize SET firstname='$firstname', lastname='$lastname', address='$address', housenumber='$housenumber', zip='$zip', city='$city', country='$country', phonehome='$phonehome', email='$email', changed='$date', changedby='$username' WHERE username='$username'"; // echo $ssql; if($update=mysqli_query($con, $ssql)); { echo mysqli_error(); return "succes"; } } function validate_email($email) { $valid_address = true; $mail_pat = '^(.+)@(.+)$'; $valid_chars = "[^] \(\)<>@,;:\.\\\"\[]"; $atom = "$valid_chars+"; $quoted_user='(\"[^\"]*\")'; $word = "($atom|$quoted_user)"; $user_pat = "^$word(\.$word)*$"; $ip_domain_pat='^\[([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\]$'; $domain_pat = "^$atom(\.$atom)*$"; if (preg_match($mail_pat, $email, $components)) { $user = $components[1]; $domain = $components[2]; // validate user if (preg_match($user_pat, $user)) { // validate domain if (preg_match($ip_domain_pat, $domain, $ip_components)) { // this is an IP address for ($i=1;$i<=4;$i++) { if ($ip_components[$i] > 255) { $valid_address = false; break; } } } else { // Domain is symbolic name if (preg_match($domain_pat, $domain)) { /* domain name seems valid, but now make sure that it ends in a three-letter word (like com, net, org, gov, edu, int) or a two-letter word, representing country (ca, uk, nl), and that there's a hostname preceding the domain or country. */ $domain_components = explode(".", $domain); // Make sure there's a host name preceding the domain. if (sizeof($domain_components) < 2) $valid_address = false; else { $top_level_domain = strtolower($domain_components[sizeof($domain_components)-1]); if (strlen($top_level_domain) < 2 || strlen($top_level_domain) > 3) $valid_address = false; elseif (strlen($top_level_domain) == 3) { switch ($top_level_domain) { case 'com': case 'net': case 'org': case 'gov': case 'edu': case 'int': break; default: $valid_address = false; break; } } } } else { $valid_address = false; } } } else { $valid_address = false; } } else $valid_address = false; if ($valid_address && ENTRY_EMAIL_ADDRESS_CHECK == 1) { if (!checkdnsrr($domain, "MX") && !checkdnsrr($domain, "A")) { $valid_address = false; } } return $valid_address; } //function to get the date function last_login() { // $date = gmdate("Y-m-d"); $date = gmdate('Y-m-d H:i:s'); return $date; } //function that sets the session variable function sess_vars($base_dir, $server, $dbusername, $dbpassword, $dbpassname, $table_name, $user, $pass) { $con = new mysqli("localhost","admin",'fhs36x56',"bbutik"); if($con->connect_error){ die("connection failed:" .$con->connect_error); } $sql = "SELECT * FROM authorize WHERE username = '$user' and password = md5('$pass')"; $result = mysqli_query($con, $sql); //get the number of rows in the result set $num = mysqli_num_rows($result); echo "NUMFUNC " . $num; //set session variables if there is a match if ($num != 0) { while ($sql = mysqli_fetch_object($result)) { $_SESSION['first_name'] = $sql -> firstname; $_SESSION['last_name'] = $sql -> lastname; $_SESSION['user_name'] = $sql -> username; $_SESSION['password'] = $sql -> password; $_SESSION['group1'] = $sql -> group1; $_SESSION['group2'] = $sql -> group2; $_SESSION['group3'] = $sql -> group3; $_SESSION['pchange'] = $sql -> pchange; $_SESSION['email'] = $sql -> email; $_SESSION['redirect'] = $sql -> redirect; $_SESSION['verified'] = $sql -> verified; $_SESSION['last_login'] = $sql -> last_login; $_SESSION['login'] = 'login'; echo "SESLOGIN " . $_SESSION['login']; //exit; } }else{ $_SESSION['redirect'] = "login.php"; } } //functions that will determine if access is allowed function allow_access($group) { if ($_SESSION[group1] == "$group" || $_SESSION[group2] == "$group" || $_SESSION[group3] == "$group" || $_SESSION[group1] == "administrator" || $_SESSION[group2] == "administrator" || $_SESSION[group3] == "administrator" || $_SESSION[user_name] == "$group") { $allowed = "yes"; }else{ $allowed = "no"; } return $allowed; } //function to check the length of the requested password function password_check($min_pass, $max_pass, $pass) { $valid = "yes"; if ($min_pass > strlen($pass) || $max_pass < strlen($pass)) { $valid = "no"; } return $valid; } ?>   Database bbutik       Sess      Dato: 25-05-2026 Uge: 22 Ugedag: Mandag cecnet.dk