wee

The Project

A simple registration website

Download...

github.com/gapczar/Regi/archive/master.zip

Workshop
Setting Up a Local Project
Connecting to the Database
Using $_GET and $_POST
Image Upload and Form Validation

View this on...

www.slideshare.net/gapczar/test-16614129

Requirements

Apache2
Php 5.3 or above
MySql
PhpMyAdmin
or MAMP, WAMP, and XAMPP

Steps

Installation of requirements (MAMP,
XAMPP or WAMP)
Structure of the project
Adding hostname to /etc/hosts
Edit the httpd.conf in Apache
Start Apache and test it

Project Structure

Project Directory
web directory
index.php

Hosts in MAC/Unix

Mac/Linux in terminal
sudo vi /etc/hosts

and insert this
127.0.0.1 www.webcamp.com.local

Hosts in Windows
Open file in notepad
c:windowssystem32driversetchosts
insert
127.0.0.1 www.webcamp.com.local

The number to the right is your computers default ip
address. In most cases the number should be the same
as have listed here. The words are the virtual host name.
www.webcamp.com.local for my the Project directory
Save the file. Make sure notepad doesn’t append .txt to
the file.

Location of conf ﬁle

MAC OS (MAMP)
/Applications/MAMP/conf/apache/httpd.conf

WINDOWS OS (WAMP)
c:wampbinapacheApache2.2.11confhttpd.conf

UNIX OS (XAMPP)
xamppapacheconfextra
xamppliteapacheconfextra

Relocation of conf file

MAC
Open /Applications/MAMP/conf/apache/httpd.conf

Change
Listen 8888 -> Listen 80
ServerName localhost:8888 -> ServerName localhost

Insert
NameVirtualHost *:80
Include /Users/computer_name/Sites/vhost/*.conf //sample

Create a new file with an extension .conf and save it to the folder /
Users/computer_name/Sites/vhost and insert the code (next page) in
this file.

Virtual Host
<VirtualHost *:80>
    ServerName www.webcamp.com.local
    DocumentRoot "/folder/path"
    DocumentIndex index.php
    <Directory "/folder/path">
        Allow from All
    </Directory>
</VirtualHost>

RESTART YOUR APACHE

and its done!

Old Way of Connecting to
a MySQL Database

$conn = mysql_connect('127.0.0.1', 'root', '');
$db = mysql_select_db('database', $conn);

New Ways of Connecting
to a MySQL Database

PDO
MySQLi

PDO (PHP Data Objects)

a database access layer providing
uniform access to multiple databases

MySQLi

an improved mysql extension developed
to take advantage of MySQL’s new
features

PDO vs. MySQLi

PDO MySQLi
12 Drivers (CUBRID,
Microsoft SQL Server and
Sybase, Firebird/Interbase,
Database Support IBM, Informix, MySQL, MySQL only
Microsoft SQL Server,
Oracle, ODBC and DB2,
PostgreSQL, SQLite, 4D)

API OOP OOP + procedural

Named Parameters YES NO

Positional Parameters YES YES

Prepared Statements YES YES

API (Application
Programming Interface)

deﬁnes classes, methods, functions and
variables needed to call in order to carry
out a certain task

Named Parameters

arguments speciﬁed by name

'SELECT * FROM users WHERE name LIKE :name'

Positional Parameters

arguments speciﬁed by position

'SELECT * FROM users WHERE name LIKE ?'

Prepared Statements

a compiled template for the SQL that an
application wants to run and is customizable
using variable parameters

Connecting via PDO

$conn = new PDO(
'mysql:host=127.0.0.1;dbname=database',
'username',
'password'
);

Querying via PDO

$sql = 'SELECT * FROM users ' .
'WHERE first_name LIKE :first_name ' .
'AND last_name LIKE :last_name';

$stmt = $db->prepare($sql);
$stmt->execute(array(
':last_name' => 'Doe',
':first_name' => 'Jane'
));
$result = $stmt->fetchAll(PDO::FETCH_ASSOC);

Error Handling via PDO
try {
$conn = new PDO(
'mysql:host=127.0.0.1;dbname=database',
'root',
''
);
$conn->setAttribute(
PDO::ATTR_ERRMODE,
PDO::ERRMODE_EXCEPTION
);
} catch (PDOException $e) {
die($e->getMessage());
}

Error Handling Strategies

PDO::ERRMODE_SILENT
PDO::ERRMODE_WARNING
PDO::ERRMODE_EXCEPTION

Closing Connection via PDO

$conn = null;

Connecting via MySQLi
(Procedural Way)

$conn = mysqli_connect('127.0.0.1', 'root', '', 'dbname');

Connecting via MySQLi
(Object-Oriented Way)

$conn = new mysqli('127.0.0.1','root','','dbname');

Querying via MySQLi
(Procedural Way)
$firstName = 'Jane';
$sql = 'SELECT * FROM users WHERE first_name LIKE ?';

if ($stmt = mysqli_prepare($db, $sql)) {
mysqli_stmt_bind_param($stmt, 's', $firstName);
mysqli_stmt_execute($stmt);
mysqli_stmt_bind_result($stmt, $col1, $col2, $col3);

while (mysqli_stmt_fetch($stmt)) {
printf("%s %s %s n", $col1, $col2, $col3);
}

mysqli_stmt_close($stmt);
}

Querying via MySQLi
(Object-Oriented Way)
$firstName = 'Jane';
$sql = 'SELECT * FROM users WHERE first_name LIKE ?';

if ($stmt = $conn->prepare($sql)) {
$stmt->bind_param('s', $firstName);
$stmt->execute();
$stmt->bind_result($col1, $col2, $col3, $col4, $col5);

while ($stmt->fetch()) {
printf("%s %s %s n", $col1, $col2, $col3);
}
$stmt->close();
}

Error Handling via MySQLi

// procedural way
if (mysqli_connect_errno()) {
die(mysqli_connect_error());
}

// object-oriented way
if ($conn->connect_errno) {
die($conn->connect_error);
}

Closing Connection via
MySQLi

// procedural way
mysqli_close($conn);

// object-oriented way
if ($conn->connect_errno) {
die($conn->connect_error);
}

Things to Tackle

Request Methods of Form Submission
method=”POST”
method=”GET”
Superglobals
$_GET and $_POST

Request Methods of Form
Submission

Create an HTML Form
<form ... method=”POST”>
...
input elements
...
submit button
</form>

<form ... method=”GET”>
...
input elements
...
submit button
</form>

GET vs. POST
GET POST

Technical body of HTTP
URL
difference Request

Recommended viewing something
changing something
Usage without changing it

GET vs. POST
GET POST

bookmark page sensitive information
search engines can multi-part binary (ﬁle
Advantages
index the page with upload)
passed data large quantities of data

cannot bookmark or
size limitation
direct access to the page
Disadvantages not suitable to use for
search engines cannot
sensitive information
index the page

SUPERGLOBALS

accessible
all scope

available

SUPERGLOBALS
$GLOBALS
$_COOKIE
$_GET
$_SERVER
$_SESSION
$_ENV $_POST
$_REQUEST
$_FILES

$_GET

represents data sent to the PHP
script in a URL

$_GET example
For method=‘GET’:
...
<form action=”search.php”>
Keyword: <input type="text" name="keyword"><br>
<input type="submit" value="Search">
</form>
...

in search.php:
<html>
<body>

Keyword: <?php echo $_GET["keyword"]; ?><br>

</body>
</html>

$_POST

represents data sent to the PHP script
via HTTP POST

$_POST Example
For method=‘POST’:
...
<form action=”login.php” method=”POST”>
Name: <input type="text" name="name"><br>
Age: <input type="text" name="age"><br>
<input type="submit" value="Login">
</form>
...

in login.php:
<html>
<body>

Hi <?php echo $_POST["name"]; ?>!<br>
You are <?php echo $_POST["age"]; ?> years old.

</body>
</html>

In 2 steps...
Client submits ﬁle
Server processes submitted ﬁle

To submit a ﬁle...
Specify content type

<form ... enctype=”multipart/form-data”>
...
</form>

And...
Include a ﬁle input

<form ... enctype=”multipart/form-data”>
...
<input name=”photo” type=”file”>
...
</form>

To process a ﬁle...
Handle
Validate
Save

Handling the $_FILES
Array
   (
       [user] => Array
           (
               [name] => Array
                   (
                       [photo] => image1.jpg
                   )
               [type] => Array
                   (
                       [photo] => image/jpeg
                   )
               [tmp_name] => Array
                   (
                       [photo] => /private/var/tmp/phpunJdED
                   )
               [error] => Array
                   (
                       [photo] => 0
                   )
               [size] => Array
                   (
                       [photo] => 93521
                   )
           )
   )

$_FILES
name - original file name
type - file mime type
tmp_name - temporary file location
error - error code
size - file size (in bytes)

Validating

The ﬁle must be an image

Validation by...
Extension
Mime Type
Attribute

Validation by Attribute
getimagesize($img)

Get the size of an image. On failure, FALSE is
returned.

From: getimagesize. http://php.net/manual/en/function.getimagesize.php (Accessed February 2013)

Saving

move_uploaded_file($img, $destination)

Moves an uploaded ﬁle to a new location.
Returns TRUE on success.

From: move_uploaded_ﬁle. http://php.net/manual/en/function.move-uploaded-file.php
(Accessed February 2013)

Before validating...

Sanitize

Sanitize

Remove, replace, escape unwanted characters

Validate

Ensure that data is acceptable

Sanitize with...
filter_var($data, $filter)

Filters a variable with a specified filter.
Returns the filtered data, or FALSE if the filter
fails.

From: filter_var. http://php.net/manual/en/function.filter-var.php (Accessed February 2013)

Using sanitize ﬁlters...
FILTER_SANITIZE_EMAIL
FILTER_SANITIZE_ENCODED
FILTER_SANITIZE_MAGIC_QUOTES
FILTER_SANITIZE_NUMBER_FLOAT
FILTER_SANITIZE_NUMBER_INT
FILTER_SANITIZE_SPECIAL_CHARS
FILTER_SANITIZE_FULL_SPECIAL_CHARS
FILTER_SANITIZE_STRING
FILTER_SANITIZE_STRIPPED
FILTER_SANITIZE_URL
FILTER_UNSAFE_RAW

From: Sanitize ﬁlters. http://www.php.net/manual/en/filter.filters.sanitize.php (Accessed
February 2013)

Validate with...
filter_var($data, $filter)

Filters a variable with a specified filter.
Returns the filtered data, or FALSE if the filter
fails.

From: filter_var. http://php.net/manual/en/function.filter-var.php (Accessed February 2013)

Using validate ﬁlters...
FILTER_VALIDATE_BOOLEAN

FILTER_VALIDATE_EMAIL

FILTER_VALIDATE_FLOAT

FILTER_VALIDATE_INT

FILTER_VALIDATE_IP

FILTER_VALIDATE_REGEXP

FILTER_VALIDATE_URL

From: Validate ﬁlters. http://www.php.net/manual/en/filter.filters.validate.php (Accessed
February 2013)

See a full working
example...

github.com/gapczar/Regi-dev

wee

More Related Content

What's hot

Viewers also liked

Similar to wee

wee