PHP Assignment 4
PHP Assignment 4
Develop a website on “
Registration Page:
<?php include ( "inc/connect.inc.php" ); ?>
<?php
ob_start();
session_start();
if (!isset($_SESSION['user_login'])) {
}
else {
header("location: index.php");
}
$u_fname = "";
$u_lname = "";
$u_email = "";
$u_mobile = "";
$u_address = "";
$u_pass = "";
if (isset($_POST['signup'])) {
//declere veriable
$u_fname = $_POST['first_name'];
$u_lname = $_POST['last_name'];
$u_email = $_POST['email'];
$u_mobile = $_POST['mobile'];
$u_address = $_POST['signupaddress'];
$u_pass = $_POST['password'];
//triming name
$_POST['first_name'] = trim($_POST['first_name']);
$_POST['last_name'] = trim($_POST['last_name']);
try {
if(empty($_POST['first_name'])) {
throw new Exception('Fullname can not be empty');
}
if (is_numeric($_POST['first_name'][0])) {
throw new Exception('Please write your correct name!');
}
if(empty($_POST['last_name'])) {
throw new Exception('Lastname can not be empty');
}
if (is_numeric($_POST['last_name'][0])) {
throw new Exception('lastname first character must be a letter!');
}
if(empty($_POST['email'])) {
throw new Exception('Email can not be empty');
}
if(empty($_POST['mobile'])) {
throw new Exception('Mobile can not be empty');
}
if(empty($_POST['password'])) {
throw new Exception('Password can not be empty');
}
if(empty($_POST['signupaddress'])) {
throw new Exception('Address can not be empty');
}
// Check if email already exists
$check = 0;
$e_check = mysql_query("SELECT email FROM `user` WHERE email='$u_email'");
$email_check = mysql_num_rows($e_check);
if (strlen($_POST['first_name']) >2 && strlen($_POST['first_name']) <16 ) {
if ($check == 0 ) {
if ($email_check == 0) {
if (strlen($_POST['password']) >1 ) {
$d = date("Y-m-d"); //Year - Month - Day
$_POST['first_name'] = ucwords($_POST['first_name']);
$_POST['last_name'] = ucwords($_POST['last_name']);
$_POST['last_name'] = ucwords($_POST['last_name']);
$_POST['email'] = mb_convert_case($u_email, MB_CASE_LOWER, "UTF-8");
$_POST['password'] = md5($_POST['password']);
$confirmCode = substr( rand() * 900000 + 100000, 0, 6 );
// send email
$msg = "
Assalamu Alaikum...
Your activation code: ".$confirmCode."
Signup email: ".$_POST['email']."
";
if (@mail($_POST['email'],"eBuyBD Activation Code",$msg, "From:eBuyBD <no-
reply@ebuybd.xyz>")) {
$result = mysql_query("INSERT INTO user
(firstName,lastName,email,mobile,address,password,confirmCode) VALUES
('$_POST[first_name]','$_POST[last_name]','$_POST[email]','$_POST[mobile]','$_POST[s
ignupaddress]','$_POST[password]','$confirmCode')");
//success message
$success_message = '
<div class="signupform_content"><h2><font face="bookman">Registration successfull!
</font></h2>
<div class="signupform_text" style="font-size: 18px; text-align: center;">
<font face="bookman">
Email: '.$u_email.'<br>
Activation code sent to your email. <br>
Your activation code: '.$confirmCode.'
</font></div></div>';
}else {
throw new Exception('Email is not valid!');
}
}else {
throw new Exception('Make strong password!');
}
}else {
throw new Exception('Email already taken!');
}
}else {
throw new Exception('Username already taken!');
}
}else {
throw new Exception('Firstname must be 2-15 characters!');
}
}
catch(Exception $e) {
$error_message = $e->getMessage();
}
}
?>
<!doctype html>
<html>
<head>
<title>Welcome to ebuybd online shop</title>
<link rel="stylesheet" type="text/css" href="css/style.css">
</head>
<body class="home-welcome-text" style="background-image:
url(image/homebackgrndimg2.png);">
<div class="homepageheader" style="position: inherit;">
<div class="signinButton loginButton">
<div class="uiloginbutton signinButton loginButton" style="margin-right: 40px;">
<a style="text-decoration: none;" href="signin.php">SIGN IN</a>
</div>
<div class="uiloginbutton signinButton loginButton" style="">
<a style="text-decoration: none;" href="login.php">LOG IN</a>
</div>
</div>
<div style="float: left; margin: 5px 0px 0px 23px;">
<a href="index.php">
<img style=" height: 75px; width: 130px;" src="image/ebuybdlogo.png">
</a>
</div>
<div class="">
<div id="srcheader">
<form id="newsearch" method="get" action="http://www.google.com">
<input type="text" class="srctextinput" name="q" size="21" maxlength="120"
placeholder="Search Here..."><input type="submit" value="search" class="srcbutton" >
</form>
<div class="srcclear"></div>
</div>
</div>
</div>
<?php
if(isset($success_message)) {echo $success_message;}
else {
echo '
<div class="holecontainer" style="float: right; margin-right: 36%; padding-top: 26px;">
<div class="container">
<div>
<div>
<div class="signupform_content">
<h2>Sign Up Form!</h2>
<div class="signupform_text"></div>
<div>
<form action="" method="POST" class="registration">
<div class="signup_form">
<div>
<td >
<input name="first_name" id="first_name" placeholder="First Name"
required="required" class="first_name signupbox" type="text" size="30" value="'.
$u_fname.'" >
</td>
</div>
<div>
<td >
<input name="last_name" id="last_name" placeholder="Last Name"
required="required" class="last_name signupbox" type="text" size="30" value="'.
$u_lname.'" >
</td>
</div>
<div>
<td>
<input name="email" placeholder="Enter Your Email" required="required" class="email
signupbox" type="email" size="30" value="'.$u_email.'">
</td
> </div>
<div>
<td>
<input name="mobile" placeholder="Enter Your Mobile" required="required"
class="email signupbox" type="text" size="30" value="'.$u_mobile.'">
</td>
</div>
<div>
<td>
<input name="signupaddress" placeholder="Write Your Full Address"
required="required" class="email signupbox" type="text" size="30" value="'.
$u_address.'">
</td>
</div>
<div>
<td>
<input name="password" id="password-1" required="required" placeholder="Enter New
Password" class="password signupbox " type="password" size="30" value="'.
$u_pass.'">
</td>
</div>
<div>
<input name="signup" class="uisignupbutton signupbutton" type="submit" value="Sign
Me Up!">
</div>
<div class="signup_error_msg">';
if (isset($error_message)) {echo $error_message;}
echo'</div>
</div>
</form>
</div>
</div>
</div>
</div>
</div>
</div>
';
}
?>
</body>
</html>
Login Page :
<?php
ob_start();
if (!isset($_SESSION['user_login'])) {
else {
header("location: index.php");
$emails = "";
$passs = "";
if (isset($_POST['login'])) {
$user_login = mysql_real_escape_string($_POST['email']);
$password_login = mysql_real_escape_string($_POST['password']);
$num = 0;
$password_login_md5 = md5($password_login);
$result = mysql_query("SELECT * FROM user WHERE (email='$user_login') AND
password='$password_login_md5' AND activation='yes'");
$num = mysql_num_rows($result);
$get_user_email = mysql_fetch_assoc($result);
$get_user_uname_db = $get_user_email['id'];
if ($num>0) {
$_SESSION['user_login'] = $get_user_uname_db;
if (isset($_REQUEST['ono'])) {
$ono = mysql_real_escape_string($_REQUEST['ono']);
header("location: orderform.php?poid=".$ono."");
}else {
header('location: index.php');
exit();
else {
$num1 = mysql_num_rows($result1);
$get_user_email1 = mysql_fetch_assoc($result1);
$get_user_uname_db1 = $get_user_email1['id'];
if ($num1>0) {
$emails = $user_login;
$activacc ='';
}else {
$emails = $user_login;
$passs = $password_login;
$error_message = '<br><br>
</font></div>';
$acemails = "";
$acccode = "";
if(isset($_POST['activate'])){
if(isset($_POST['actcode'])){
$user_login = mysql_real_escape_string($_POST['acemail']);
$user_acccode = mysql_real_escape_string($_POST['actcode']);
$num3 = mysql_num_rows($result2);
echo $user_login;
if ($num3>0) {
$get_user_email = mysql_fetch_assoc($result2);
$get_user_uname_db = $get_user_email['id'];
$_SESSION['user_login'] = $get_user_uname_db;
if (isset($_REQUEST['ono'])) {
$ono = mysql_real_escape_string($_REQUEST['ono']);
header("location: orderform.php?poid=".$ono."");
}else {
header('location: index.php');
exit();
}else {
$emails = $user_login;
$error_message = '<br><br>
</font></div>';
}else {
$error_message = '<br><br>
</font></div>';
?>
<!doctype html>
<html>
<head>
</head>
<div class="homepageheader">
</div>
</div>
</div>
<a href="index.php">
</a>
</div>
<div class="">
<div id="srcheader">
</form>
<div class="srcclear"></div>
</div>
</div>
</div>
<div class="container">
<div>
<div>
<div class="signupform_content">
<?php
if (isset($activacc)){
}else {
?>
<div class="signupform_text"></div>
<div>
<div class="signup_form">
<?php
if (isset($activacc)) {
echo '
<div class="signup_error_msg">
</font></div>
</div>
<div>
<td>
</td>
</div>
<div>
<td>
</td>
</div>
<div>
</div>
';
}else{
echo '
<div>
<td>
</td>
</div>
<div>
<td>
</td>
</div>
<div>
</div>
';
}
?>
</a>
</div>
<div class="signup_error_msg">
<?php
?>
</div>
</div>
</form>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>
SQL Database :
--
-- Database: `ebuybd`
--
-- --------------------------------------------------------
--
--
--
--
INSERT INTO `admin` (`id`, `firstName`, `lastName`, `email`, `mobile`, `address`, `password`,
`type`, `confirmCode`) VALUES
-- --------------------------------------------------------
--
--
--
--
INSERT INTO `orders` (`id`, `uid`, `pid`, `quantity`, `oplace`, `mobile`, `dstatus`, `odate`,
`ddate`) VALUES
(4, 7, 26, 0, 'South Seota, Manikganj Sadar', '01677531881', 'no', '2017-04-07', '0000-00-
00'),
-- --------------------------------------------------------
--
--
--
--
INSERT INTO `products` (`id`, `pName`, `price`, `description`, `available`, `category`, `type`,
`item`, `pCode`, `picture`) VALUES
(7, 'Jewelry-full metal earring', 2000, 'Dekhte khub e sundor', 2, 'women', 'earring',
'ornament', 'SR002', 'earrings-online-for-women-4.jpg'),
(10, 'Boutique Saree 1', 1300, 'Osthir mama!', 4, 'women', 'cloathing', 'saree', 'SR001', 'Saree
Red Color 1.jpg'),
(32, 'Nekles set', 799, 'Good, Awesome', 2, 'women', 'no', 'ornament', 'O2352',
'1491497316.jpg'),
(33, 'T Shirt 1', 250, 'Nice', 10, 'women', 'no', 'tshirt', 'TS252', '1491497478.jpg'),
(34, 'T Shirt 2', 400, 'Nice Looking', 12, 'women', 'no', 'tshirt', 'TS3463', '1491497528.jpg'),
(35, 'T Shirt 3', 299, 'Nice', 27, 'women', 'no', 'tshirt', 'TS345', '1491497588.jpg'),
(36, 'T Shirt 4', 890, 'Nice, good', 30, 'women', 'no', 'tshirt', 'TS2354', '1491497644.jpg'),
(38, 'HijabScarf (20)', 400, 'HijabScarf ', 23, 'women', 'no', 'hijab', 'H3254',
'1491498134.JPG'),
(39, 'Hijab 3', 600, 'hijab-2013', 20, 'women', 'no', 'hijab', 'H2354', '1491498202.jpg'),
(40, 'Hijab 4', 800, 'nice and cool', 23, 'women', 'no', 'hijab', 'H233', '1491498250.jpg'),
(43, 'Perfume 2', 3000, 'Awesome smell', 6, 'women', 'no', 'perfume', 'P252',
'1491649246.jpg'),
(44, 'Perfume 3', 5000, 'Nice', 3, 'women', 'no', 'perfume', 'P254', '1491498508.jpg'),
(49, 'Soap 1', 80, 'Nice', 20, 'women', 'no', 'toiletry', 'SP234', '1491499503.jpg'),
(51, 'New Perfume 4', 4453, 'asdfa', 34, 'women', 'clothing', 'watch', 'asdf78',
'1491707164.jpg'),
(52, 'Sareesf', 453354, 'asdfa', 342, 'women', 'clothing', 'perfume', 'S56', '1491850298.jpg'),
(53, 'Soap 3', 345, 'Cool', 30, 'women', 'clothing', 'toiletry', 'S789', '1491850339.jpg');
-- --------------------------------------------------------
--
--
--
--
INSERT INTO `user` (`id`, `firstName`, `lastName`, `email`, `mobile`, `address`, `password`,
`confirmCode`, `activation`) VALUES
--
--
--
--
--
--
--
--
--
--
--
--
--
--
--
--
--
--
--
<?php
ob_start();
session_start();
if (!isset($_SESSION['admin_login'])) {
header("location: login.php");
$user = "";
else {
$user = $_SESSION['admin_login'];
$get_user_email = mysql_fetch_assoc($result);
$uname_db = $get_user_email['firstName'];
$pname = "";
$price = "";
$available = "";
$category = "";
$type = "";
$item = "";
$pCode = "";
$descri = "";
if (isset($_POST['signup'])) {
//declere veriable
$pname = $_POST['pname'];
$price = $_POST['price'];
$available = $_POST['available'];
$category = $_POST['category'];
$type = $_POST['type'];
$item = $_POST['item'];
$pCode = $_POST['code'];
$descri = $_POST['descri'];
//triming name
$_POST['pname'] = trim($_POST['pname']);
$profile_pic_name = @$_FILES['profilepic']['name'];
if (((@$_FILES['profilepic']['type']=='image/jpeg') || (@$_FILES['profilepic']
['type']=='image/png') || (@$_FILES['profilepic']['type']=='image/gif')) &&
(@$_FILES['profilepic']['size'] < 1000000)) {
$item = $item;
if (file_exists("../image/product/$item")) {
//nothing
}else {
mkdir("../image/product/$item");
if (file_exists("../image/product/$item/".$filename)) {
}else {
if(move_uploaded_file(@$_FILES["profilepic"]["tmp_name"], "../image/product/$item/".
$filename)){
$photos = $filename;
header("Location: allproducts.php");
}else {
echo "Something Worng on upload!!!";
else {
$search_value = "";
?>
<!doctype html>
<html>
<head>
</head>
<div class="homepageheader">
<?php
if ($user!="") {
}
?>
</div>
<?php
if ($user!="") {
else {
?>
</div>
</div>
<a href="index.php">
</a>
</div>
<div id="srcheader">
<?php
?>
</form>
<div class="srcclear"></div>
</div>
</div>
<div class="categolis">
<table>
<tr>
<th>
</th>
</tr>
</table>
</div>
<?php
else {
echo '
<div class="container">
<div>
<div>
<div class="signupform_content">
<h2>Add Product Form!</h2>
<div class="signup_error_msg">';
echo '</div>
<div class="signupform_text"></div>
<div>
<div class="signup_form">
<div>
<td >
</td>
</div>
<div>
<td >
</td>
</div>
<div>
<td>
</td>
</div>
<div>
<td >
<input name="descri" id="first_name" placeholder="Description" required="required"
class="first_name signupbox" type="text" size="30" value="'.$descri.'" >
</td>
</div>
<div>
<td>
</select>
</td>
</div>
<div>
<option value="other">Other</option>
</select>
</div>
<div>
<td>
<option value="watch">Watch</option>
<option value="tshirt">T-Shirt</option>
<option value="hijab">Hijab</option>
<option value="perfume">Perfume</option>
<option value="footwear">Footwear</option>
<option value="toiletry">Toiletry</option>
</select>
</td>
</div>
<div>
<td>
</td>
</div>
<div>
<td>
</td>
</div>
<div>
</div>
</div>
</form>
</div>
</div>
</div>
</div>
</div>
</div>
';
?>
</body>
</html>
Search :
<?php include ( "../inc/connect.inc.php" ); ?>
<?php
ob_start();
session_start();
if (!isset($_SESSION['admin_login'])) {
header("location: login.php");
$user = "";
else {
$user = $_SESSION['admin_login'];
$get_user_email = mysql_fetch_assoc($result);
$uname_db = $get_user_email['firstName'];
if (isset($_REQUEST['keywords'])) {
$epid = mysql_real_escape_string($_REQUEST['keywords']);
}else {
header('location: index.php');
}else {
header('location: index.php');
$search_value = "";
$search_value = trim($_GET['keywords']);
?>
<!doctype html>
<html>
<head>
</head>
<div class="homepageheader">
<?php
if ($user!="") {
?>
</div>
<div class="uiloginbutton signinButton loginButton">
<?php
if ($user!="") {
else {
?>
</div>
</div>
<a href="index.php">
</a>
</div>
<div class="">
<div id="srcheader">
<?php
?>
</form>
<div class="srcclear"></div>
</div>
</div>
</div>
<div class="categolis">
<table>
<tr>
<th>
</th>
</tr>
</table>
</div>
<div>
<table class="rightsidemenu">
<th>Id</th>
<th>P Name</th>
<th>Description</th>
<th>Price</th>
<th>Available</th>
<th>Category</th>
<th>Type</th>
<th>Item</th>
<th>P Code</th>
<th>Edit</th>
</tr>
<tr>
$search_value = trim($_GET['keywords']);
$run = mysql_query($query);
if ( $total = mysql_num_rows($run)) {
while ($row=mysql_fetch_assoc($run)) {
$id = $row['id'];
$descri = $row['description'];
$price = $row['price'];
$available = $row['available'];
$category = $row['category'];
$type = $row['type'];
$item = $row['item'];
$pCode = $row['pCode'];
$picture = $row['picture'];
?>
</a>
</div>' ?></th>
</tr>
<?php }
?>
</table>
</div>
</body>
</html>
View Product :
<?php include ( "../inc/connect.inc.php" ); ?>
<?php
ob_start();
session_start();
if (!isset($_SESSION['user_login'])) {
$user = "";
}
else {
$user = $_SESSION['user_login'];
$get_user_email = mysql_fetch_assoc($result);
$uname_db = $get_user_email['firstName'];
if (isset($_REQUEST['pid'])) {
$pid = mysql_real_escape_string($_REQUEST['pid']);
}else {
header('location: index.php');
if (mysql_num_rows($getposts)) {
$row = mysql_fetch_assoc($getposts);
$id = $row['id'];
$pName = $row['pName'];
$price = $row['price'];
$description = $row['description'];
$picture = $row['picture'];
$item = $row['item'];
$available =$row['available'];
?>
<!DOCTYPE html>
<html>
<head>
<title>SAREE</title>
<link rel="stylesheet" type="text/css" href="../css/style.css">
</head>
<body>
<div class="categolis">
<table>
<tr>
<th>
</th>
</tr>
</table>
</div>
echo '
<div>
</div>
</div>
<div style="">
<p>
'.$description.'
</p>
<div>
<h3 style="padding: 20px 0 5px 0; font-size: 20px;">Want to buy this product? </h3>
<div id="srcheader">
</form>
<div class="srcclear"></div>
</div>
</div>
</div>
</div>
';
?>
</div>
<div style="padding: 30px 95px; font-size: 25px; margin: 0 auto; display: table; width:
98%;">
<div>
<?php
if (mysql_num_rows($getposts)) {
$id = $row['id'];
$pName = $row['pName'];
$price = $row['price'];
$description = $row['description'];
$picture = $row['picture'];
echo '
</a>
</div>
</li>
</ul>
';
?>
</div>
</div>
</body>
</html>