mysqli is installed
Connection Established Successfully
function setlang() {
if ( !empty($_GET['language']) ) {
echo "cookie IKKE sat";
$lang = $_GET['language'];
echo "LA " . $lang;
if ($lang=='da') {
$_COOKIE['language'] = 'da';
}
if ($lang=='en') {
$_COOKIE['language'] = 'en';
}
if ($lang=='de') {
$_COOKIE['language'] = 'de';
}
// $_COOKIE['language'] = $_GET['language'] === 'da' ? 'da' ? 'de' : 'da';
} else {
// echo "cookie sat";
$_COOKIE['language'] = 'da';
}
}
function checkpost ($post){ // check hvis $_POST = ''
if(!empty($post)) {
return $post;
}
else {
return '0';
}
}
function sek($dato,$f,$bilag,$kontonavn,$kontolb,$kontoid,$konto,$amount){
//SAVE TEXTFILE
$myfile = fopen("asek.txt", "a") or die("Unable to open file!");
$txt = "\n".$dato. " " .$f." ".$bilag." ".$kontonavn." ".$kontolb." ".$kontoid." "." ".$konto." ".$amount."\n";
echo "
";
fwrite($myfile, $txt);
fclose($myfile);
//SAVE TEXTFILE END
}
function kontofinans($bilag, $kontonr, $kontolb, $kontoid, $dkf, $dato, $periode, $tekst, $tekstref, $beloebvaluta, $beloebdkr, $momskd, $ordernr, $tnr){
$sql = "INSERT INTO kontofinans (bilag, kontonr, kontolb, kontoid, dkf, dato, periode, tekst, tekstref, beloebvaluta , beloebdkr, momskd, tnr)
VALUES('$bilag','$kontonr', '$kontolb','$kontoid','$dkf','$dato','$periode','$stekst','$stekstref','$beloebvaluta','$beloebdkr','$momskd','$tnr')";
if(!$update=mysqli_query($con, $sql)); {
$return = mysql_error();
}
}
function account($kontolb, $amount){
$result = mysqli_query($con, "SELECT * FROM konto WHERE kontolb = '$kontolb'");
$row = mysqli_fetch_assoc($result);
$prim = $row['primo'];
$sp = $row['spost'];
$spos = $sp + $amount;
$kontosaldo = $prim + $spos;
// echo "
";
// echo "KONTOLB " . $kontolb;
// echo "
";
// echo " Primo " .$prim . " primpost " . $sp . " spost " . $spos . " Saldo " . $kontosaldo;
// echo "
";
$sql = "update konto set spost='$spos' where kontolb='$kontolb'"; //update konto as saved
$ressql=mysqli_query($con, $sql);
$sql2 = "update konto set kontosaldo='$kontosaldo' where kontolb='$kontolb'"; //update konto as saved
$ressql2=mysqli_query($sql2);
// $sql3 = "update konto set primo50='$spos', perprimo='$amount' where kontolb=$kontolb"; //update konto as saved
// $ressql3=mysqli_query($sql3);
}
function accountkre($creditornr, $amount){
$result = mysqli_query($con, "SELECT * FROM creditor WHERE creditornr = '$creditornr'");
$row = mysqli_fetch_assoc($result);
$saldo = $row['saldo'];
$saldo = $saldo + $amount;
$ssql = "UPDATE creditor SET saldo='$saldo' WHERE creditornr='$creditornr'";
$resultssql = mysqli_query($con, $ssql) or die(mysql_error());
}
function accountdeb($kundelb, $amount){
$date = date("Y-m-d H:i:s");
$result = mysqli_query($con, "SELECT * FROM kunder WHERE kundelb = '$kundelb'");
$row = mysqli_fetch_assoc($result);
$saldo = $row['saldo'];
echo "SALDO" . $saldo;
$sald = $saldo + $amount;
$ssql = "UPDATE kunder SET saldo='$sald', rettet='$date' WHERE kundelb='$kundelb'";
$resultssql = mysqli_query($con, $ssql) or die(mysql_error());
//exit;
}
function checkenter($prg){
if (isset($_SESSION['username'])){
$username=$_SESSION['username'];
$con = new mysqli("localhost","admin",'fhs36x56',"bbutik");
if($con->connect_error){
die("connection failed:" .$con->connect_error);
}
$s0 = mysqli_query($con, "select * from authorize WHERE username = '$username'");
// $num0 = mysqli_num_rows($s0);
while($r0 = mysqli_fetch_assoc($s0)) {
$customerno = $r0['customerno'];
}
$s1 = mysqli_query($con, "select * from tblmatrixmenu WHERE tblprogram = '$prg'");
$num1 = mysqli_num_rows($s1);
while($r1 = mysqli_fetch_assoc($s1)) {
$tablenumber = $r1['tblnumber'];
}
$s2 = mysqli_query($con, "SELECT * FROM tblmatrix WHERE medarbejdernr = '$customerno' AND ckbox ='$tablenumber'");
$num2 = mysqli_num_rows($s2);
while($r2 = mysqli_fetch_array($s2)){
$matrixvalue = $r2['matrixvalue'];
if ($matrixvalue == '0') {
echo '
Du har ikke adgang her - kontakt admin
';
exit;
}
}
}
}
function addDayswithdate($date,$days){
$newdate = date('d-m-Y', strtotime($date) + strtotime("+$days day", 0));
return $newdate;
}
function mod10($docnum){
// make sure there is just numbers in $docnum
$docnum = preg_replace("/[^0-9]/","",$docnum);
// change order of values to use in foreach
$vals = array_reverse(str_split($docnum));
// multiply every other value by 2
$mult = true;
foreach($vals as $k => $v){
$vals[$k] = $mult ? $v*2: $v;
$vals[$k] = (string)($vals[$k]);
$mult = !$mult;
}
// checks for two digits (>9)
// $mp = array_map(function($v){
// return ($v > 9) ? $v[0] + $v[1] : $v;
// }, $vals);
// adds the values
$sum = array_sum($mp);
//gets the mod
$md = $sum % 10;
// checks how much for 10
$result = 10 - $md;
// returns the value
return $result;
}
function delete_cookie() {
setcookie("language", "", time()-3600);
}
function change_password($username, $old_passwd, $new_passwd, $email)
// change password for username/old_passwd to new_passwd
// return true or false
{
// if the old password and email are correct!
// change their password to new_passwd and return true
// else return false
$date = date("Y-m-d H:i:s");
$q = "SELECT * from authorize where username='$username' and password = md5('$old_passwd')";
$result = mysqli_query($con, $q);
$q = mysqli_num_rows($result);
if ($q>0) {
$row = mysqli_fetch_array($result);
$mail = $row['email'];
echo $mail;
if ($email==$mail){
$crypted_new_passwd = md5($new_passwd);
$ssql = "UPDATE authorize SET password='$crypted_new_passwd' WHERE username='$username'";
echo $ssql;
if(!$update=mysqli_query($con, $ssql)); {
echo mysql_error();
return "succes";
}
}
else {
return "email";
}
}
}
function reset_password($username, $email)
// set password for username to a random value
// return the new password or false on failure
{
global $db_link;
$result = wrap_db_query("SELECT email FROM " . DB_TABLE . " WHERE username='" . wrap_db_escape_string($username) . "'");
if (!$result) {
return false; // no result
} else if (wrap_db_num_rows($result)==0) {
return false; // username not in db
} else {
$fields = wrap_db_fetch_array($result);
if ($email != $fields['email']) {
return false; // emails do not match
}
}
$new_passwd = random_password(6);
// crypt user password entry
$crypted_new_passwd = crypt_password($new_passwd);
// set user's password to this in database or return false
$result = wrap_db_query("UPDATE " . BOOKING_USER_TABLE . " SET passwd = '" . wrap_db_escape_string($crypted_new_passwd) . "' " .
"WHERE username = '" . wrap_db_escape_string($username) . "' AND email = '" . wrap_db_escape_string($email) . "'");
if (!$result) {
return false; // not changed
} else {
return $new_passwd; // changed successfully
}
}
function wrap_session_is_registered($variable) {
return isset($_SESSION[$variable]);
}
function wrap_session_register($name, $variable = '') {
$_SESSION[$name] = $variable;
}
function wrap_db_num_rows($db_query) {
@ $result = mysqli_num_rows($db_query);
return $result;
}
function get_user_information($username) // return the user information array or false on failure
{
$result = mysqli_query($con, "SELECT * FROM " . DB_TABLE . " WHERE username = '" . $username . "'");
if (!$result) {
return false; // not changed
} else if (mysqli_num_rows($result)==0) {
return false; // email not in db
} else {
$fields = mysqli_fetch_array($result);
}
return $fields;
}
function generateRandomString($length = 10) {
return substr(str_shuffle(str_repeat($x='0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ', ceil($length/strlen($x)) )),1,$length);
}
function register($username, $password, $firstname, $lastname, $firmname, $address, $housenumber, $zip, $city, $country, $phonehome, $email, $redirect){
// register new person with db
// return false or error
$res = mysqli_query($con, "SELECT * from stamdatanummerserie WHERE defper = '1' ");
$row = mysqli_fetch_assoc($res);
$periode = $row['stamdataper'];
$knr = $row['customerno'];
$knr = $knr+1;
$sql = "update stamdatanummerserie set customerno='$knr' where stamdataper='$periode'";
$update=mysqli_query($con, $sql) or die(mysql_error());
$date = date("Y-m-d H:i:s");
$result = mysqli_query($con, "SELECT * FROM authorize where username = '$username'");
if (!$result)
return "1";
if (mysqli_num_rows($result)>0)
return "2";
$pas = md5($passwd);
$ssql = "INSERT INTO authorize (customerno, firstname, lastname, username, password, pchange, address, housenumber, zip, city, country, phonehome, email, redirect, verified, created)
VALUES ('$knr', '$firstname','$lastname','$username', md5('$password'), '1', '$address','$housenumber','$zip','$city','$country','$phonehome','$email', '$redirect', '1', '$date')" or die(mysql_error());
$update2=mysqli_query($con, $ssql);
//SAVE TEXTFILE
$myfile = fopen("kunder.txt", "a") or die("Unable to open file!");
$txt = $date." ".$knr." ".$firstname." ".$lastname." ".$username." ".$password." ".$address." ".$housenumber." ".$zip." ".$city." ".$phonehome." ".$email. "/n";
fwrite($myfile, $txt);
fclose($myfile);
//SAVE TEXTFILE END
$sql = "INSERT INTO kunder (knr, businessname, firstname, lastname , adresse, husnr, postdistrikt, bynavn, land, telefon, email, momskd, betal, primosaldo, saldo, prisgruppe,oprettet,rettet, rettetaf)
VALUES ('$knr','$businessname', '$firstname','$lastname','$address','$housenumber', '$zip', '$city', '$country','$phonehome','$email', '2', '1', '0', '0', '1', '$date', '$date', 'web')" or die(mysql_error());
$update3=mysqli_query($con, $sql) or die(mysql_error());
if($update3)
return "succes";
}
function update_user_information($username, $firstname, $lastname, $address, $housenumber, $zip, $city, $country, $phonehome, $email){
// register new person with db
// return false or error
$date = date("Y/m/d");
$result = mysqli_query($con, "SELECT * FROM authorize where username = '$username'");
// echo "USER ". $username;
$num = mysqli_num_rows($result);
//echo "Antal1 " . $num;
if ($num != 0)
$ssql = "UPDATE authorize SET firstname='$firstname', lastname='$lastname', address='$address', housenumber='$housenumber', zip='$zip', city='$city', country='$country', phonehome='$phonehome', email='$email', changed='$date', changedby='$username' WHERE username='$username'";
// echo $ssql;
if($update=mysqli_query($con, $ssql)); {
echo mysqli_error();
return "succes";
}
}
function validate_email($email) {
$valid_address = true;
$mail_pat = '^(.+)@(.+)$';
$valid_chars = "[^] \(\)<>@,;:\.\\\"\[]";
$atom = "$valid_chars+";
$quoted_user='(\"[^\"]*\")';
$word = "($atom|$quoted_user)";
$user_pat = "^$word(\.$word)*$";
$ip_domain_pat='^\[([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\]$';
$domain_pat = "^$atom(\.$atom)*$";
if (preg_match($mail_pat, $email, $components)) {
$user = $components[1];
$domain = $components[2];
// validate user
if (preg_match($user_pat, $user)) {
// validate domain
if (preg_match($ip_domain_pat, $domain, $ip_components)) {
// this is an IP address
for ($i=1;$i<=4;$i++) {
if ($ip_components[$i] > 255) {
$valid_address = false;
break;
}
}
}
else {
// Domain is symbolic name
if (preg_match($domain_pat, $domain)) {
/* domain name seems valid, but now make sure that it ends in a
three-letter word (like com, net, org, gov, edu, int) or a two-letter word,
representing country (ca, uk, nl), and that there's a hostname preceding
the domain or country. */
$domain_components = explode(".", $domain);
// Make sure there's a host name preceding the domain.
if (sizeof($domain_components) < 2)
$valid_address = false;
else {
$top_level_domain = strtolower($domain_components[sizeof($domain_components)-1]);
if (strlen($top_level_domain) < 2 || strlen($top_level_domain) > 3)
$valid_address = false;
elseif (strlen($top_level_domain) == 3) {
switch ($top_level_domain) {
case 'com':
case 'net':
case 'org':
case 'gov':
case 'edu':
case 'int':
break;
default:
$valid_address = false;
break;
}
}
}
}
else {
$valid_address = false;
}
}
}
else {
$valid_address = false;
}
}
else
$valid_address = false;
if ($valid_address && ENTRY_EMAIL_ADDRESS_CHECK == 1) {
if (!checkdnsrr($domain, "MX") && !checkdnsrr($domain, "A")) {
$valid_address = false;
}
}
return $valid_address;
}
//function to get the date
function last_login()
{
// $date = gmdate("Y-m-d");
$date = gmdate('Y-m-d H:i:s');
return $date;
}
//function that sets the session variable
function sess_vars($base_dir, $server, $dbusername, $dbpassword, $dbpassname, $table_name, $user, $pass)
{
$con = new mysqli("localhost","admin",'fhs36x56',"bbutik");
if($con->connect_error){
die("connection failed:" .$con->connect_error);
}
$sql = "SELECT * FROM authorize WHERE username = '$user' and password = md5('$pass')";
$result = mysqli_query($con, $sql);
//get the number of rows in the result set
$num = mysqli_num_rows($result);
echo "NUMFUNC " . $num;
//set session variables if there is a match
if ($num != 0)
{
while ($sql = mysqli_fetch_object($result))
{
$_SESSION['first_name'] = $sql -> firstname;
$_SESSION['last_name'] = $sql -> lastname;
$_SESSION['user_name'] = $sql -> username;
$_SESSION['password'] = $sql -> password;
$_SESSION['group1'] = $sql -> group1;
$_SESSION['group2'] = $sql -> group2;
$_SESSION['group3'] = $sql -> group3;
$_SESSION['pchange'] = $sql -> pchange;
$_SESSION['email'] = $sql -> email;
$_SESSION['redirect'] = $sql -> redirect;
$_SESSION['verified'] = $sql -> verified;
$_SESSION['last_login'] = $sql -> last_login;
$_SESSION['login'] = 'login';
echo "SESLOGIN " . $_SESSION['login'];
//exit;
}
}else{
$_SESSION['redirect'] = "login.php";
}
}
//functions that will determine if access is allowed
function allow_access($group)
{
if ($_SESSION[group1] == "$group" || $_SESSION[group2] == "$group" || $_SESSION[group3] == "$group" ||
$_SESSION[group1] == "administrator" || $_SESSION[group2] == "administrator" || $_SESSION[group3] == "administrator" ||
$_SESSION[user_name] == "$group")
{
$allowed = "yes";
}else{
$allowed = "no";
}
return $allowed;
}
//function to check the length of the requested password
function password_check($min_pass, $max_pass, $pass)
{
$valid = "yes";
if ($min_pass > strlen($pass) || $max_pass < strlen($pass))
{
$valid = "no";
}
return $valid;
}
?>
Database bbutik   Sess Dato: 25-05-2026 Uge: 22 Ugedag: Mandag
cecnet.dk