ak47

Here my question is how to print/display the numbers from pressed buttons(as shown in figure) using JavaScript. However, here I am working on a device and we have to control it from JavaScript. Below I have mentioned my code(.js) snippet:

// Numbers function
function Numbers(cmd)
{
System.Print("Command Sent is: "+cmd);
var num = cmd;
System.Print("Button pressed is: "+num);
}

// Displaying Numbers
function Display()
{
Numbers(num);
num.toString();
dbgPrint("Displaying number: " + num);
}

And parameters for this function I am passing from some other file(.xml) as standard.

<function name="Display" export="Display">
<parameter name="display" type="string" description="Drag and drop this for clear-button function.">
</parameter>
</function>
<function name="Numbers" export="Numbers">
<parameter name="command" type="mcinteger" description="Drag and drop this command for Numbers.">
<choice name="1" value="1"/>
<choice name="2" value="2"/>
<choice name="3" value="3"/>
<choice name="4" value="4"/>
<choice name="5" value="5"/>
<choice name="6" value="6"/>
<choice name="7" value="7"/>
<choice name="8" value="8"/>
<choice name="9" value="9"/>
<choice name="0" value="0"/>
</parameter>
</function>

@dsonesuk,  I have not completely got your points. It's ok, I will study what you said. Thank you for your valuable time and also for great informations.

Hi all, 
1. I want to delete selected(checkbox) items from database(MySQL). Here I am not getting any error, but I couldn't do the delete function.
2. Wants to play videos in website. Here videos storing into folder and also into database, but cannot playin website.

I tried in many ways, but I couldn't. So, please help to make above mentioned functions workable. 

dashboard.php
<form method="post" enctype="multipart/form-data">
<input type="submit" name="delete" class="btn btn-primary" onclick="myFunction(id)" style="font-size: 15px; margin-left: 3em;" value="Delete" />
</form>
<div>
<?php
$query = mysqli_query($database, "SELECT * FROM video");
while($row = mysqli_fetch_assoc($query))
{
$id = $row['id'];
$name = $row['name'];
$url = "../uploads";
// $url = $row['url'];
$fileextensionvalue= $row['fileextension'];
echo "<span class='col-md-6'>
<div class='row'>
<div class='col-md-1'><label class='checkbox'><input style='margin-right:1em;' name='checkbox[<?php echo $id; ?>]' type='checkbox' id='checkbox[]' data-toggle='checkbox' /></label></div>
<div class='col-md-1'><a href='#' style='color:red;font-size:18px;'>$id</a></div>
<div class='col-md-10'><a href='#' style='color:red;font-size:18px;'>$name</a></div>
</div>
<center style='padding:25px;'><video width='320' preload='auto' controls><source src='$url' type='video/$fileextensionvalue;codecs='avc1.42E01E, mp4a.40.2, H.264, aac, FLAC, Opus, VP9, VP8, Vorbis''/></video></center>
</span>";
}
?>
</div>

<script type="text/javascript">
function myFunction(id)
{
var r=confirm("Are you sure to delete selected video/s ?");
if(r==true)
{
window.location.assign("deleteVideo.php?id=" + id);
}
}
</script>

deleteVideo.php
<?php
include '../database/database.php';
$sql = mysqli_query($database, "SELECT * FROM video WHERE id='$id'");
if(empty($_POST['delete']))
{
Print '<script>alert("Please choose file/s to delete.");</script>';
Print '<script>window.location.assign("dashboard.php");</script>';
}
else if(!empty($_POST['delete']))
{
foreach($_POST['checkbox'] as $id => $val)
{
if($val=='checked')
{
$query=mysqli_query("DELETE FROM video WHERE id = '".$id."'");
$result= mysqli_query($database, $query) or die("Invalid query");
}
}
}
?>

17 hours ago, Gabrielphp said:

Upon refreshing, the video is still uploaded to database ? Not the folder, because i might be thinking that it displays you the page because in database there is a video saved with an url but on your host in the videos folder there is no video with the url from db, that's mostly why you have that error. 

Thank You @Gabrielphp, Now the videos are not saving upon refreshing the page. I gave URL like this: $url = "http://localhost/xampp/htdocs/VS/uploaded/$name";

and the ip address of my local host is 127.0.0.1. I know the url path is wrong, but I don't know how to make it right. Can you help me please?

Here $name is "video name"

11 hours ago, justsomeguy said:

There are several problems with that upload code.  The major one is that you are doing no error checking or validation on the file that was uploaded.  If someone uses that form to upload a .php file, you'll just copy it to your server where someone can then access the URL, and now you're running some random PHP code that someone uploaded.  That's probably the single easiest way to get your server hacked.  You need to validate the file to make sure that it's allowed, and you also need to check for errors that may have happened during the upload:

http://php.net/manual/en/features.file-upload.errors.php

You also need to use prepared statements when you're sending data to the database.  Don't put variables right into the query, use a prepared statement with placeholders that you can use to send the data separately to protect your database.  The mysqli extension supports prepared statements:

http://php.net/manual/en/mysqli.quickstart.prepared-statements.php

To avoid re-submitting the form when someone refreshes the browser, after you finish processing the form you should send a location header to redirect the user.  Then if they refresh they will only refresh the redirected URL instead of the form submission.  You can redirect them to a thank you page, some other page that shows a message from the form, back to the form, etc.  You should also move all of your form processing code to the top of your file, before any HTML output.  If you're just going to end up redirecting the user there's no reason to send any HTML at all.  The first thing the file should do is figure out if it needs to process or display the form, and go from there.

 

 

For some reason you used an embed tag, you only need to use a video tag.  Look up the video reference to see how to use that.  You also messed up with the quotes in that string, if you view the source code of that page in the browser you'll see the problem.

Yes, you are right. I know how to use prepare statements but for initiation I used directly. Yes, as you told about "re-submission upon refresh of page" I did that and really it worked for me nicely. I am on the way to make my videos viewable. If I really face problems in future, surely I will contact you.

Thank you so much for your valuable investment on my bugs and for your answers and suggestions.

@dsonesuk, I really don't know how to do that. If you don't mind can you help me to fix that by writing the script?

Here I can upload videos successfully into database and videos are saving in appropriate folder named "uploaded". As I mentioned in question, once after uploading the video, if I refresh the browser the previously uploaded video is going saving in my database. Another question is, if I click on the video(displayed name in myvideo.php), video is not going to display instead I am getting "Object Not Found" error. I request you people to give me solutions to solve these problems. Below I am posting my code:

myvideo.php:

<div class="content">
<div class="card">
<div class="header" id="stand-fix" style="border-bottom: 1px solid #E1E1E1;">
<?php
if(isset($_POST['submit']))
{
// $conn = mysqli_connect("localhost", "root", "", "videos") or die(mysqli_error());
$name = (isset($_FILES['file']['name']) ? $_FILES['file']['name'] : '');
$temp = (isset($_FILES['file']['tmp_name']) ? $_FILES['file']['tmp_name'] : '');
move_uploaded_file($temp, "uploaded/".$name);
$url = "http://localhost/xampp/htdocs/VS/uploaded/$name";
mysqli_query($database, "INSERT INTO video VALUE ('','$name','$url')");
}
?>
<form action="myvideo.php" method="post" enctype="multipart/form-data">
<div class="row">
<div class="col-md-7">
<h4 class="title">My Videos</h4>
</div>
<div class="col-md-3">
<input type="file" name="file" class="btn btn-primary" style="font-size: 15px;"><br />
</div>
<div class="col-md-2">
<input type="submit" name="submit" class="btn btn-primary pull-right" style="font-size: 15px;" value="Upload">
</div>
</div>
</form>
<?php
if(isset($_POST['submit']))
{
echo '<script language="javascript">';
echo 'alert("Your video has been successfully uploaded.")';
echo "window.location.href='dashboard.php'";
echo '</script>';
}
?>
<hr width="50%">
</div>
<div class="content" style="height: 30em; direction: ltr; overflow: auto;">
<div class="row" style="margin-left:4em;" style="direction: rtl;">
<?php
$database = mysqli_connect("localhost", "root", "", "videos") or die(mysqli_error());
$query = mysqli_query($database, "SELECT * FROM video");
while($row=mysqli_fetch_assoc($query))
{
$id = $row['id'];
$name = $row['name'];
$url = $row['url'];
echo "<p style='margin:0.5em;'><a href='watch.php?id=$id' style='color:red;'>$id&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$name</a></p><br />";
echo "<embed src='.$id.$url.'><video width='200' height='200' controls></video></embed>";
}
?>
</div>
</div>
</div>
</div>

watch.php

<?php
$conn = mysqli_connect("localhost", "root", "", "videos") or die(mysqli_error());
if(isset($_GET['id']))
{
$id = $_GET['id'];
$query = mysqli_query($conn, "SELECT * FROM video WHERE id='$id'");
while($row=mysqli_fetch_assoc($query))
{
$name = $row['name'];
$url = $row['url'];
}
echo "<p style='font-size:20px;'><center>You are watching ".$name."</center></p><br /><embed src='.$url.'><video width='600' height='400' controls></video></embed>";
}
else
{
echo "Error!";
}
?>

Hi everyone, thank you for your valuable time you spent on my post. But I didn't wanted to waste your time, so I tried my best. But still I have error "Fatal error: Call to a member function bind_param() on boolean". Kindly give me a solution to get rid-off this. Below is my code:

<?php
    include '../_database/database.php';
    ini_set("display_errors",1);    
    session_start();
    $msg="";    
    if($_SERVER["REQUEST_METHOD"] == "POST")
    {
        $username = $_POST['Username'];
        $email = $_POST['Email'];
        $employee = $_POST['EmployeeID'];
        $designation = $_POST['Designation'];
        $password = $_POST['Password'];
        $id = $_SESSION['Id'];
        $sql=$database->prepare("UPDATE users SET (Username,Email,EmployeeID,Designation,Password) VALUES (?,?,?,?,?) WHERE Id=?");
        $sql->bind_param("ssiss", $username, $email, $employee, $designation, $password);
        $sql->execute();
        if($sql->execute()){
            echo "<font face='Verdana' size='2' color='green'>You have successfully updated your profile<br /></font>";
        }
        else{
            print_r($sql->errorInfo());
            $msg=" <font face='Verdana' size='2' color='red'>There is some problem in updating your profile. Please contact site admin<br /></font>";
        }
    }
?>

include '../_database/database.php'; ---- Here I defined database as " $database=mysqli_connect("localhost", "root", "", "videos") or die(mysqli_error());

Sorry, I have made some mistakes in my previous post.

And my corrected code is:

<?php
    include '../_database/database.php';
    ini_set("display_errors",1);    
    session_start();
    $msg="";
    $temp=(isset($_SESSION['Username']) ? $_SESSION['Username'] : '');
    $id=(isset($_SESSION['Id']) ? $_SESSION['Id'] : '');
    if($_SERVER["REQUEST_METHOD"] == "POST")
    {
        $username = $_POST['Username'];
        $email = $_POST['Email'];
        $employee = $_POST['EmployeeID'];
        $designation = $_POST['Designation'];
        $password = $_POST['Password'];
        $sql=$database->prepare("UPDATE users SET Username=:name,Email=:email,EmployeeID=:employee,Designation=:designation,Password=:password WHERE Id='$id'");
        $sql->bindParam(':username',$username,PDO::PARAM_STR, 50);
        $sql->bindParam(':email',$email,PDO::PARAM_STR, 50);
        $sql->bindParam(':employee',$employee,PDO::PARAM_INT, 11);
        $sql->bindParam(':designation',$designation,PDO::PARAM_STR, 50);
        $sql->bindParam(':password',$password,PDO::PARAM_STR, 50);
        if($sql->execute()){
            echo "<font face='Verdana' size='2' color=green>You have successfully updated your profile<br></font>";
        }
        else{
            print_r($sql->errorInfo());
            $msg=" <font face='Verdana' size='2' color=red>There is some problem in updating your profile. Please contact site admin<br></font>";
        }

    }

?>

But still I have the error:  "Fatal error: Uncaught Error: Call to a member function bindParam() on boolean in C:\xampp\htdocs\VS\components\update-profile.php:16 Stack trace: #0 {main} thrown in C:\xampp\htdocs\VS\components\update-profile.php on line 16"

Hi All,

I am new to php and I don't about following error. So I request you to give me solution for this and also please explain something about this error.

  Here I am working on User's profile page. I able to fetch data and displaying in profile's form, but data is not updating and I got the following error when I clicked for "Updation".

" Uncaught Error: Call to a member function bindParam() on boolean in C:\xampp\htdocs\VS\components\update-profile.php:16 Stack trace: #0 {main} thrown in C:\xampp\htdocs\VS\components\update-profile.php on line 16 "

And my code is:

<?php
    include '../_database/database.php';
    ini_set("display_errors",1);    
    session_start();
    $msg="";
    $temp=(isset($_SESSION['Username']) ? $_SESSION['Username'] : '');
    $id=(isset($_SESSION['Id']) ? $_SESSION['Id'] : '');
    if($_SERVER["REQUEST_METHOD"] == "POST")
    {
        $username = $_POST['Username'];
        $email = $_POST['Email'];
        $employee = $_POST['EmployeeID'];
        $designation = $_POST['Designation'];
        $password = $_POST['Password'];
        $sql=$database->prepare("update set Username=:name,Email=:email,EmployeeID=:employee,Designation=:designation,Password=:password where Id='$id'");
        $sql->bindParam(':Username',$name,PDO::PARAM_STR, 50);
        $sql->bindParam(':Email',$email,PDO::PARAM_STR, 50);
        $sql->bindParam(':EmployeeID',$employee,PDO::PARAM_INT, 11);
        $sql->bindParam(':Designation',$designation,PDO::PARAM_STR, 50);
        $sql->bindParam(':Password',$password,PDO::PARAM_STR, 50);
        if($sql->execute()){
            echo "<font face='Verdana' size='2' color=green>You have successfully updated your profile<br></font>";
        }
        else{
            print_r($sql->errorInfo());
            $msg=" <font face='Verdana' size='2' color=red>There is some problem in updating your profile. Please contact site admin<br></font>";
        }

    }

?>

        If this is wrong kindly give me a solution.

Thank You,