Linux, Apache, MySQL, PHP

<?php
        //FOLDERS
        //create array for each directory
        $pathDIR = "dirname/";
        $DIR = Array(
        );
        //store directory names into an array with foreach
        foreach (glob($pathDIR . '/[0-30]*', GLOB_ONLYDIR) as $dirname) {
            $DIR[] = $dirname;    
        }
        //display path directories
        for($a = 0; $a < count($DIR); $a++) {
            echo $DIR[$a];   
        }
        //FILES
        //create array for each directory
        $pathFILE = Array();
        //create array for files    
        $files = Array();            
        //loop start
        for($b = 1; $b <= count($DIR); $b++) {
            $pathFILE[$b] = "dirname/" . $b . "/"; 
            $files[$b] = Array();
            //store files in array with foreach
            foreach(glob($pathFILE[$b] . '*.jpg') as $filename) {
                $files[$b][] = $filename;
            }
        }
        //display files
        for($d = 1; $d <= count($files); $d++) {
            for($e = 0; $e <= count($files[$d]); $e++) {
                echo $files[$d][$e];
            }
            echo "\r\n\r\n";
        }
        ?>

var_dump($files);

Quote from Wikipedia:

On July 13, 2004, PHP 5 was released, [...] PHP 5 included new features such as improved support for object-oriented programming, ...

Quote:

And what project will be suitable for me to learn things quickly and smartly .... i.e e-commerce or else?? ?

Member 12758039 wrote:

000webhosting

1. Is the username and password valid?
2. Has the user completed the test?

</<pre lang="PHP">// this function is used to sanitize code against sql injection attack.
function ms_escape_string($data) {
        if ( !isset($data) or empty($data) ) return '';
        if ( is_numeric($data) ) return $data;

        $non_displayables = array(
            '/%0[0-8bcef]/',            // url encoded 00-08, 11, 12, 14, 15
            '/%1[0-9a-f]/',             // url encoded 16-31
            '/[\x00-\x08]/',            // 00-08
            '/\x0b/',                   // 11
            '/\x0c/',                   // 12
            '/[\x0e-\x1f]/'             // 14-31
        );
        foreach ( $non_displayables as $regex )
            $data = preg_replace( $regex, '', $data );
        $data = str_replace("'", "''", $data );
        return $data;
    }

$strSQL = "SELECT u.empl_first, u.username, u.empl_first +' '+ empl_last as fullname, e.Department, e.UnitName, e.empnum FROM users u inner join Employee e on u.Employee_Id = e.EmpNum inner join tblTBA t on u.Employee_Id = t.Employee_Id WHERE USERNAME = ?
 and PASSWORD = ? ";
 $params = array($_POST["user"], $_POST["pass"]);
 $sqll = sqlsrv_query($con, $strSQL, $params);

samflex wrote:

First off, I am using a hash.
$pass = md5($pass);

samflex wrote:

check whether username and / or password is correct and redirecting to appropriate page

SELECT 
    u.empl_first, 
    u.username, 
    u.empl_first +' '+ u.empl_last as fullname, 
    e.Department, 
    e.UnitName, 
    e.empnum 
FROM 
    users u 
    INNER JOIN Employee e 
    ON u.Employee_Id = e.EmpNum 
WHERE 
    u.USERNAME = ? 
And 
    u.PASSWORD = ?

SELECT Employee_Id FROM tblTBA WHERE Employee_Id = ?

 $user = trim($_POST["user"]);
 $pass = trim($_POST["pass"]);

     // hash to sanitize the input further

//	$tsql = md5($pass);

   $tsql = "SELECT u.empl_first, u.username, u.empl_first +' '+ empl_last as fullname FROM users u WHERE u.USERNAME = ? and u.PASSWORD = ? ";
	//echo $strSQL;
	$params = array($user, $pass);
    $result = sqlsrv_query( $con, $tsql, $params, array(), array( "Scrollable" => 'static' ));

    $row_count = sqlsrv_num_rows($result);
    //echo $row_count;

    if ($row_count == 0){
       header('location:login.php?msg=1');
       exit;

}

else
{
   $tSQL = "SELECT u.empl_first, u.username FROM users u inner join tblTBA t on u.Employee_Id = t.Employee_ID WHERE USERNAME = '".ms_escape_string($user)."'
	and PASSWORD = '".ms_escape_string($pass)."' ";
	echo $strSQL;
    //$params = array($user, $pass);
	$sqll = sqlsrv_query($con, $tSQL);
}
if ($objResult = sqlsrv_fetch_array($sqll, SQLSRV_FETCH_ASSOC)) {
    $firstname = $objResult["empl_first"];
 	$_SESSION["username"] = $objResult["username"];
	header('location:donetba.php?user=' . urlencode($firstname));
  }
  else
    header("location:registered.php?user='".ms_escape_string($user)."'&pass='".ms_escape_string($pass)."' ");
   // header("location:register.php?user=. urlencode($user)&pass=. urlencode($pass)");

sqlsrv_close($con);

?>