[RELEASE] Secure PHP Web Registration Script

Quote:

Originally Posted by Svinseladden i have tried backwards php. back to 5.2.9. i get this all the time: error log: [04-Jul-2011 01:56:23] PHP Warning: PHP Startup: Unable to load dynamic library 'C:\Program Files (x86)\PHP\ext\php_mssql.dll' - The specified module could not be found. in Unknown on line 0 [04-Jul-2011 01:56:23] PHP Warning: PHP Startup: Unable to load dynamic library 'C:\Program Files (x86)\PHP\ext\php_oci8.dll' - The specified module could not be found. in Unknown on line 0 [04-Jul-2011 01:56:23] PHP Warning: PHP Startup: Unable to load dynamic library 'C:\Program Files (x86)\PHP\ext\php_pdo_mssql.dll' - The specified module could not be found. in Unknown on line 0 [04-Jul-2011 01:56:23] PHP Warning: PHP Startup: Unable to load dynamic library 'C:\Program Files (x86)\PHP\ext\php_pdo_oci.dll' - The specified module could not be found. in Unknown on line 0 [04-Jul-2011 01:56:23] PHP Warning: PHP Startup: Unable to load dynamic library 'C:\Program Files (x86)\PHP\ext\php_pdo_oci8.dll' - The specified module could not be found. in Unknown on line 0 [04-Jul-2011 01:56:23] PHP Warning: PHP Startup: Unable to load dynamic library 'C:\Program Files (x86)\PHP\ext\php_pdo_pgsql.dll' - The specified module could not be found. in Unknown on line 0 [04-Jul-2011 01:56:23] PHP Warning: PHP Startup: Unable to load dynamic library 'C:\Program Files (x86)\PHP\ext\php_pdo_sqlite_external.dll' - The specified module could not be found. in Unknown on line 0 [04-Jul-2011 01:56:23] PHP Warning: PHP Startup: Unable to load dynamic library 'C:\Program Files (x86)\PHP\ext\php_pgsql.dll' - The specified module could not be found. in Unknown on line 0 [04-Jul-2011 01:56:23] PHP Warning: PHP Startup: Unable to load dynamic library 'C:\Program Files (x86)\PHP\ext\php_pspell.dll' - The specified module could not be found. in Unknown on line 0 [04-Jul-2011 01:56:23] PHP Warning: PHP Startup: Unable to load dynamic library 'C:\Program Files (x86)\PHP\ext\php_sybase_ct.dll' - The specified module could not be found. in Unknown on line 0 and they are enabled.. i use iss 7.5 windows server 2008r2 sql 2008r2 what can i do please? this is making me go insane soon..

Quote:

Originally Posted by abrasive It sounds like you have the UserUID column set to identity, but you are also trying to tell it what the UserUID is. Basically you told the database you wanted it to keep track of incrementing UserUID, but then you are trying to force you own UserUID on it, which it doesn't like. Make sure you turn the SET IDENTITY_INSERT on Users_Master back to off. Then you will want to make a modification to your registration script's insert query to no longer try to insert a UserUID, like below: So instead of doing something like this example: Code: INSERT INTO PS_UserData.dbo.Users_Master (UserUID, UserID, Pw) VALUES(2,'bubba','bubba1') You want to do something like this example: Code: INSERT INTO PS_UserData.dbo.Users_Master (UserID, Pw) VALUES('bubba','bubba1')

Quote:

Originally Posted by Svinseladden i am using your webregister files. have problems there too. gave this becouse it mabe help you see the problem. but yours using userid?

Quote:

Originally Posted by Svinseladden can not insert when Users_master when IDENTY_INSERT is set off

$sql = "INSERT INTO PS_UserData.dbo.Users_Master
(UserID,Pw,JoinDate,Admin,AdminLevel,UseQueue,Status,Leave,LeaveDate,UserType,Point,EnPassword,UserIp)
VALUES ('{$username}','{$password}',GETDATE(),0,0,0,0,0,GETDATE(),'N',0,'','{$user_ip}')";

Quote:

Originally Posted by abrasive I don't understand what you are saying. You are getting this error yes? Are you getting that error with my registration files? I assumed you modified them because this is the query from the registration files: Code: $sql = "INSERT INTO PS_UserData.dbo.Users_Master (UserID,Pw,JoinDate,Admin,AdminLevel,UseQueue,Status,Leave,LeaveDate,UserType,Point,EnPassword,UserIp) VALUES ('{$username}','{$password}',GETDATE(),0,0,0,0,0,GETDATE(),'N',0,'','{$user_ip}')"; Which it does not try to insert UserUID. It is not clear to me in what specific situation you are getting the error.

Quote:

Originally Posted by Svinseladden if you look in any of the dev relese there is questions about how to make it work.

Quote:

Originally Posted by Svinseladden what is this code? when i go in the error loggs i get that some dll.s that can't be found.. C:\PHP\ext\php5apache.dll' - The specified module could not be found. in Unknown on line 0 and 10 others. but i have all in that dir.

Quote:

Originally Posted by JohnHeatz Well, those questions are there, and they did help to make those guides better, yet, they still are on wrong section.... That is telling you that you don't have that specific .dll file, if you have it somewhere else just copy/paste it on that directory that it is telling you, but it seems like you are just missing that file....and the 10 other files that you mentioned there

Quote:

Originally Posted by tnelis If you get the following (only look at the bold part): Code: MSSQL Function Tests MSSQL functions existing...and connections are possible! [B]ODBC functions existing...and connections are possible![/B] PHP version: 5.2.17 Then just either rewrite the script to use ODBC or sql_srv I'll attach an ODBC rewrite of Abrasive's. Don't thank me, thank him. :rolleyes:

Quote:

Originally Posted by castor4878 My remark regarding the choice to post in this thread or in a new one was mostly for me - I do prefer clean threads for releases, and quick & dirty but throwable thread for specific (and time limited) issue, but this is *my* preference only, I didn't say I'm right. that said. my list of questions wasn't there to overwhelm you but really to try to understand the issue since there are several contradictory points. you're right to explain what you tried (and readers will expect that indeed you did some tries) but please do not try all and every things, a collection of failures is not that helpful. <<i don't have apache installed. do i need to? like i have said alot of times now i have iss 7.5 with php manager installed. sql 2008r2>> ok, it wasn't that clear (neither) because of the previous statement: <<You must have the php_mssql library for Apache installed ...>>. so if you're using IIS (Internet Information Services, not ISS), you shall use the PHP preprocessor compiled with VC9 - yeah who give a sheet about the used compiler, the issue comes from the runtime of the MS compilers; simply consider that this version is the right one. * installation of PHP over IIS 7+ I won't copy all details, the full installation is [Only registered and activated users can see links. Click Here To Register...] - note you will need the [Only registered and activated users can see links. Click Here To Register...] or the [Only registered and activated users can see links. Click Here To Register...] w/o install if you prefer. and optionally the [Only registered and activated users can see links. Click Here To Register...] I just re-install the whole thing (IIS 5.1 & PHP 5.3.6) from scratch on my XP (I'm using Apache of course) and it requires 5 mn. Of course, you must test the IIS svr with a dummy index.html page to be sure it works after activating the w3svc service and test the PHP ISAPI module with a dummy index.php file. Only point that may cause error (on IIS 5.1, not sure about 7) is the "cgi.force_redirect flag in php.ini (it must be set to 0 as indicated in the install page). * access to MSSQL server and to MSSQL only ... your previous post listed OCixxx file (for Oracle), sqlite (for SQLite) etc, etc, let focus and what you wanna acheive instead of adding useless stuff, if errors still occur at least they will be relevant for what you are trying to do. w/o rewriting the full story, accessing to MSSQL (and to MySQL too for some aspects) has always been paintfull because of incomplete package (due to no redistribuable libs or other details). the good news is that M$ itself does provide an efficient native client to connect to the SQL svr, and this time it's a fully functional package (no missing libs, no boring (.net) overhead)). [Only registered and activated users can see links. Click Here To Register...] and [Only registered and activated users can see links. Click Here To Register...]. Execute the downloaded .exe and give the "ext" folder of your PHP install when it prompts you for the target directory. It copies several files named: php_pdo_sqlsrv_5?_[n]ts_vc?.dll in this folder. There is also a "SQLSRV_Help.chm" file that you will want to put in the middle of your desktop. So, summary of previous points: we have install PHP 5.*3* and we run IIS (so VC*9*), and we prefer a thread safe ('ts') module, the only module that needed to be loaded thru php.ini is so: php_sqlsrv_53_ts_vc9.dll in the "Dynamic Extensions" section add: extension=php_sqlsrv_53_ts_vc9.dll let all other modules commented - you don't need them. (php_gd2.dll & php_curl.dll can also be useful but they aren't DB-modules solet forget them right now). you can also define the full path of your ext directory with the "extension_dir" directive, set it for better reliability, it's suppose to use "./ext" as default, but a guaranty is better. so, full php.ini settings are: Code: [PHP] ;;;;;;;;;;;;;;;;;;;; ; Language Options ; ;;;;;;;;;;;;;;;;;;;; engine = On short_open_tag = On asp_tags = Off ;;;;;;;;;;;;;;;;;;;;;;;;; ; Paths and Directories ; ;;;;;;;;;;;;;;;;;;;;;;;;; doc_root = user_dir = extension_dir ="D:\net\php\5.3.6\ext" cgi.force_redirect = 0 cgi.fix_pathinfo=1 fastcgi.impersonate = 1; fastcgi.logging = 0 ;;;;;;;;;;;;;;;;;;;;;; ; Dynamic Extensions ; ;;;;;;;;;;;;;;;;;;;;;; extension=php_sqlsrv_53_ts_vc9.dll (all other options / directives left with their default values) 3 additional mn spent on that install. * connect to MSSQL restart IIS to make sure it reloads PHP with the new settings and test dummy connection: index.php: Code: <html> <head> <meta HTTP-EQUIV="Content-Type" Content="text-html; charset=Windows-1252"> </head> <body> <h2>Welcome to IIS with PHP and MSSQL **</h2> <? $connectionInfo = array( 'UID' => 'Shaiya', 'PWD' => 'Shaiya123', 'Database' => 'PS_UserData' ); $conn = sqlsrv_connect('127.0.0.1', $connectionInfo); $smt = 'SELECT UserID FROM Users_Master'; $set = sqlsrv_query($conn, $smt); echo "<ul>\n"; while ($row = sqlsrv_fetch_array($set)){ echo "<li>$row[0]</li>\n"; } echo "</ul>\n"; sqlsrv_free_stmt($set); sqlsrv_close($conn); ?> </body> </html> IIS-based php/mssql server fully functional is less than 10 mn. (functional, i didn't say useful). Edit: M$SQL 2008 R2 was already installed on the machine - with all dev modules including the support of the native driver - may be you can miss some files at this point (depending of your SQL2k8 install), if it's the case, restart the install wizard & add those modules (mainly the "native driver support"). * checking libs if at one point, you have a "Unable to load dynamic library 'foo.dll'" message; as indicated in my previous post, when a lib failed to load, it is *not* in 99% of cases because it isn't present in the given directory - "i have manualy search'ed for them and they are all there." is a bad response (unless you deliberately do stupid things of course) but it's because the lib relies on other libs that can not be found in the scanned dir. (system, env. path, ...) so [Only registered and activated users can see links. Click Here To Register...], download it, unzip in your \dev\bin\tools favorite folder and drag the lib that refuses to load on it, you will know which (other) dll is missing, then u will google it or check your install to figure out a mispelled directory name or config file.