Linux, Apache, MySQL, PHP

1. Choose the correct forum for your message. Posting a VB.NET question in the C++ forum will end in tears.
    
   
2. Be specific! Don't ask "can someone send me the code to create an application that does 'X'. Pinpoint exactly what it is you need help with.
    
   
3. Keep the subject line brief, but descriptive. eg "File Serialization problem"
    
   
4. Keep the question as brief as possible. If you have to include code, include the smallest snippet of code you can.
    
   
5. Be careful when including code that you haven't made a typo. Typing mistakes can become the focal point instead of the actual question you asked.
    
   
6. Do not remove or empty a message if others have replied. Keep the thread intact and available for others to search and read. If your problem was answered then edit your message and add "[Solved]" to the subject line of the original post, and cast an approval vote to the one or several answers that really helped you.
    
   
7. If you are posting source code with your question, place it inside <pre></pre> tags. We advise you also check the "Encode HTML tags when pasting" checkbox before pasting anything inside the PRE block, and make sure "Ignore HTML tags in this message" check box is unchecked.
    
   
8. Be courteous and DON'T SHOUT. Everyone here helps because they enjoy helping others, not because it's their job.
    
   
9. Please do not post links to your question in one forum from another, unrelated forum (such as the lounge). It will be deleted.
    
   
10. Do not be abusive, offensive, inappropriate or harass anyone on the boards. Doing so will get you kicked off and banned. Play nice.
     
    
11. If you have a school or university assignment, assume that your teacher or lecturer is also reading these forums.
     
    
12. No advertising or soliciting.
     
    
13. We reserve the right to move your posts to a more appropriate forum or to delete anything deemed inappropriate or illegal.

1. Read the question carefully
    
   
2. Understand that English isn't everyone's first language so be lenient of bad spelling and grammar
    
   
3. If a question is poorly phrased then either ask for clarification, ignore it, or mark it down. Insults are not welcome
    
   
4. If the question is inappropriate then click the 'vote to remove message' button
   

CREATE DEFINER=`root`@`%` PROCEDURE `sp_web_login_employee`(IN param_login_name varchar(255), IN param_login_password_salt varchar(255), IN param_login_password_hash varchar(255), IN param_ip_address varchar(255))
BEGIN
	DECLARE param_employee_id INT;
	DECLARE email_address VARCHAR(255);
 
	-- IF EXISTS (SELECT user_id FROM users WHERE login_name = param_login_name AND login_password_hash = param_login_password_hash AND is_blocked = FALSE) THEN
	IF EXISTS (SELECT employee_guid FROM employees WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE AND current_employee = TRUE) THEN
	BEGIN
		DECLARE param_employee_guid VARCHAR(255);
 
		SET param_employee_id = (SELECT employee_id FROM employees WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE AND current_employee = TRUE);
		SET param_employee_guid = (SELECT employee_guid FROM employees WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE AND current_employee = TRUE);
 
		UPDATE employees SET last_login_date = UTC_TIMESTAMP(), last_login_ip = param_ip_address WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE AND current_employee = TRUE;
		-- CALL sp_add_event_log("USER", param_user_id, param_user_id, "User logged on successfully.");

		-- UPDATE employees SET last_login = NOW(), allow_delete = FALSE WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE;

		SET email_address = (SELECT contact_details FROM employee_contacts INNER JOIN contact_category ON contact_category.contact_category_id = employee_contacts.contact_category WHERE contact_category.contact_category_type = "EMAIL" AND employee_contacts.employee_id = param_employee_id AND employee_contacts.use_for_communication = TRUE);
 
		SELECT email_address, employees_table.employee_id, employees_table.employee_number, employees_table.employee_guid, employees_table.first_name, employees_table.second_name,
		employees_table.third_name, employees_table.fourth_name, employees_table.last_name, employees_table.official_name, employees_table.photo,
		managers_table.employee_id AS manager_id, managers_table.official_name AS manager_name, employee_job.contract_id, employee_contracts.contract_start,
		employee_contracts.contract_expiry, job_titles.job_title_name, departments.department_name, companies.company_name, locations.location_name, country.country_name
		FROM employees employees_table
		JOIN employee_contracts ON employees_table.employee_id = employee_contracts.employee_id
		JOIN employee_job ON employees_table.employee_id = employee_job.employee_id
		JOIN job_titles ON employee_job.job_title = job_titles.job_title_id
		JOIN companies ON employee_job.company_id = companies.company_id
		JOIN departments ON employee_job.department = departments.department_id
		JOIN locations ON employee_job.company_location = locations.location_id
		JOIN country ON locations.country_code = country.country_code_alpha2
		LEFT JOIN employees managers_table ON employee_job.reporting_to = managers_table.employee_id
		WHERE employees_table.login_name = param_login_name AND employees_table.login_password_salt = param_login_password_salt AND employees_table.login_password_hash = param_login_password_hash AND employees_table.is_active = TRUE AND employees_table.current_employee = TRUE AND employee_job.is_current = TRUE;
	END;
	END IF;
 
END

<input type="hidden" name="Action" value="EDIT" /><input type="hidden" name="Selection"  id="Selection" value="-1"><div>Below is the list of your saved codes. To edit your codes, select it from the list.</div>
<select size="1" name="CodeList" id="CodeList">
<?php
   $directory = $directory = 'users/' . $_SESSION['username'];
   $filesContents = Array();
   $files = scandir( $directory ) ;
 
   foreach( $files as $file )
  {
   if ( ! is_dir( $file ) )
  {
   $filesContents[$file] = file_get_contents($directory , $file);
  echo "<option>" . $file . "</option>";
  }
   }
   ?>

<?php
   session_start();
    $directory = $directory = $_SERVER['DOCUMENT_ROOT'] . '/users/' . $_SESSION['username'];
    $file_to_delete = $_POST['CodeList'];
    if ( unlink ($directory.'/'.$file_to_delete) ) {
      echo $file_to_delete . " deleted.";
   } else {
echo "Error.";
}
?>

<select name="SType">
  <option value=""></option>
  <option value="Bid" name="Bid">Bid[2]</option>
  <option value="Lib CM" name="Library CM">Lib CM[23]</option>
  <option value="Quote" name="Quote">Quote[20]</option>
  <option value="RFP" name="RFP">RFP[2]</option>
  <option value="Removed" name="Removed">Removed[29]</option>
  <option value="Archived" name="Archived">Archived[4501]</option>
  <option value="Awarded" name="Awarded">Awarded[40]</option>
  <option value="Open" name="Open">Open[47]</option>
  <option value="Closed" name="Closed">Closed[11]</option>
  <option value="Under Review" name="Under Review">Under Review[126]</option>
  <option value="Cancelled" name="Cancelled">Cancelled[64]</option>
</select>

//If value matches dropdown value, then display records associated with dropdown value
if(isset($_REQUEST['Solicitations'])){
    if($_GET['Solicitations'] == "Bid"){
    $result = "SELECT * FROM bids where BidStatus = 1 and BidType = 'Bid' ORDER BY title";
    $query = sqlsrv_query( $conn, $sql , $params, $options );
    }
  }

<?php
error_reporting(E_ERROR | E_WARNING | E_PARSE);
 
?>
 
<?php
// Connect to SQL Server database
include("connections/CWDevConnect.php");
 
// this function is used to sanitize code against sql injection attack.
function ms_escape_string($data) {
        if ( !isset($data) or empty($data) ) return '';
        if ( is_numeric($data) ) return $data;
 
        $non_displayables = array(
            '/%0[0-8bcef]/',            // url encoded 00-08, 11, 12, 14, 15
            '/%1[0-9a-f]/',             // url encoded 16-31
            '/[\x00-\x08]/',            // 00-08
            '/\x0b/',                   // 11
            '/\x0c/',                   // 12
            '/[\x0e-\x1f]/'             // 14-31
        );
        foreach ( $non_displayables as $regex )
            $data = preg_replace( $regex, '', $data );
        $data = str_replace("'", "''", $data );
        return $data;
    }
 
$fields = array(
    'projectTitle' => array('field' => 'b.BidTitle', 'searchType' => 'like'),
    'BidType' => array('field' => 'b.BidType', 'searchType' => 'equal'),
    'BidStatus' => array('field' => 'b.BidStatus', 'searchType' => 'equal'),
    'department' => array('field' => 'b.Department', 'searchType' => 'equal'),
    'bidId' => array('field' => 'b.BidID', 'searchType' => 'equal'),
    'bidDate' => array('field' => 'b.BidDate', 'searchType' => 'equal'),
    'dueDate' => array('field' => 'b.DueDate', 'searchType' => 'equal')
 
);
 
$where = array();
foreach($fields as $fieldPost => $field) {
    if(isset($_POST[$fieldPost]) && strlen($_POST[$fieldPost]) > 0) {
        if($field['searchType'] == 'like') {
            $where[] = "".$field['field']." LIKE '%" . ms_escape_string($_POST[$fieldPost]) . "%'";
        } else {
            $where[] = "".$field['field']." = '" . ms_escape_string($_POST[$fieldPost]) . "'";
        }
    }
}
   $sql = "Select b.ID,convert(char(10),b.BidDate,101) BidDate,convert(char(10),
          b.DueDate,101)DueDate,b.BidTitle,b.DueTime,b.BidID,BidIDFile,
          d.Department,b.BidType,CASE WHEN b.AwardDate ='01/01/1900' Then NULL ELSe convert(char(10),b.AwardDate,101)END AS AwardDate,
          convert(char(10),b.LastUpdate,101) LastUpdate,s.Status
          FROM bids b inner join dept d on b.Department=d.DeptID inner join Status s on b.BidStatus=s.StatusId " . ( count($where) > 0 ? " WHERE " . implode(' AND ', $where) : "" );
//echo $sql;
  $params = array();
  $options =  array( "Scrollable" => SQLSRV_CURSOR_KEYSET );
  $query = sqlsrv_query( $conn, $sql , $params, $options );
 
  $num_rows = sqlsrv_num_rows($query);
 
  $per_page = 20;   // Per Page
  $page  = 1;
 
  if(isset($_GET["Page"]))
  {
      $page = $_GET["Page"];
  }
 
  $prev_page = $page-1;
  $next_page = $page+1;
 
  $row_start = (($per_page*$page)-$per_page);
  if($num_rows<=$per_page)
  {
      $num_pages =1;
  }
  else if(($num_rows % $per_page)==0)
  {
      $num_pages =($num_rows/$per_page) ;
  }
  else
  {
      $num_pages =($num_rows/$per_page)+1;
      $num_pages = (int)$num_pages;
  }
  $row_end = $per_page * $page;
  if($row_end > $num_rows)
  {
      $row_end = $num_rows;
  }
 
  $sql = " SELECT c.* FROM (
      SELECT ROW_NUMBER() OVER(ORDER BY ID) AS RowID,ID,convert(char(10),b.BidDate,101) BidDate,convert(char(10),
          b.DueDate,101)DueDate,b.BidTitle,b.DueTime,b.BidID,BidIDFile,
          d.Department,b.BidType,CASE WHEN b.AwardDate ='01/01/1900' Then NULL ELSe convert(char(10),b.AwardDate,101)END AS AwardDate,
          convert(char(10),b.LastUpdate,101) LastUpdate,s.Status
          FROM bids b inner join dept d on b.Department=d.DeptID inner join Status s on b.BidStatus=s.StatusId " . ( count($where) > 0 ) ? " WHERE " . implode(' AND ', $where) : " )
      ) AS c
  WHERE c.RowID > $row_start AND c.RowID <= $row_end
 
  $query = sqlsrv_query( $conn, $sql);
  ";
?>
  <table>
      <thead>
      <tr style="white-space:nowrap">
          <th></th>
          <th>Issue Date</th>
          <th>Due Date</th>
          <th>Project Title</th>
          <th>ID</th>
          <th>Department</th>
          <th>Type</th>
          <th>Award Date</th>
          <th>Last Update</th>
          <th>Status</th>
      </tr>
      </thead>
<?php
while($result = sqlsrv_fetch_array($query, SQLSRV_FETCH_ASSOC))
{
?>
 <tbody>
 <?php echo '<tr style="background:',(($c=!$c)? '#eee' : '#ddd' ),';font-size:12px;">'; ?>
    <td><div align="center"><a href="bidDetails.php?Id=<?php echo $result["ID"];?>"><img src="images/details.gif" alt="" title="Details" /></a></div></td>
    <td><div align="center"><?php echo $result["BidDate"];?></div></td>
    <td><?php echo $result["DueDate"];?><br />@<?php echo $result["DueTime"];?></td>
   <!-- <td><a href="pdfdownload.php?file=<?php echo $result["BidIDFile"];?>"><?php echo $result["BidTitle"];?></a></td>  -->
    <td><a href="uploads/<?php echo $result["BidIDFile"]; ?>" Target="DETAILS" onClick="window.open('','DETAILS','width=850,height=700,scrollbars=yes'); return true;" type="application/octet-stream"><?php echo $result["BidTitle"];?></a></td>
    <td style="white-space:nowrap"><div align="center"><?php echo $result["BidID"];?></div></td>
    <td align="right"><?php echo $result["Department"];?></td>
    <td align="right"><?php echo $result["BidType"];?></td>
    <td align="right"><?php echo $result["AwardDate"];?></td>
    <td align="right"><?php echo format_date($result["LastUpdate"]);?></td>
    <td align="right"><?php echo $result["Status"];?></td>
  </tr>
<?php
}
?>
</tbody>
</table>
<br>
Total <?php echo $num_rows;?> Record : <?php echo $num_pages;?> Page :
<?php
if($prev_page)
{
  echo " <a href='$_SERVER[SCRIPT_NAME]?Page=$prev_page&txtKeyword=$strprojectTitle&BidType=$strbidType'><< Back</a> ";
}
 
for($i=1; $i<=$num_pages; $i++){
  if($i != $page)
  {
      echo "[ <a href='$_SERVER[SCRIPT_NAME]?Page=$i&txtKeyword=$strprojectTitle&BidType=$strbidType'>$i</a> ]";
  }
  else
  {
      echo "<b> $i </b>";
  }
}
if($page!=$num_pages)
{
  echo " <a href ='$_SERVER[SCRIPT_NAME]?Page=$next_page&txtKeyword=$strprojectTitle&BidType=$strbidType'>Next>></a> ";
}
sqlsrv_close($conn);
?>

 <form method="get">
 
<table>
          <tr>
            <td style="padding:5px;">Budget:</td>
            <td style="padding:5px;"><input type="text" name="budget" class="txtfield" placeholder="Please enter your desired budget"></td>
          </tr>
          <tr>
            <td style="padding:5px;">Service Type:</td>
          <td style="padding:5px;">
              <select name="servicetype" class="txtfield">
                <option>Wedding</option>
                <option>Debut</option>
                <option>Birthday</option>
              </select>
            </td>
          </tr>
          <tr>
            <td style="padding:5px;"></td>
            <td style="padding:5px;"><input type="submit" name="search" value="Search" class="btn btn-warning"></td>
          </tr>
        </table>
        </form>
    <?php if(isset($_GET['search'])):?>
        <h3 style="background:red; color:white; width:300px; padding:5px;">Desired Amount: <?php echo $_GET['budget'] ?></h3>
    <?php endif?>
    <div class="products">
    <?php
    //current URL of the Page. cart_update.php redirects back to this URL
	$current_url = base64_encode($url="http://".$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']);
    if(isset($_GET['search']))
    {
 
$servicetype = $_GET['servicetype'];
    if($_GET['budget'] =="")
    {
        echo'<div class="alert alert-warning">Please enter your desired amount</div>';
    }
    else
    {
    $servicetype = $_GET['servicetype'];
	$results = $mysqli->query("SELECT service_inclusion,price,servicetype,soid FROM service_offer 
        where servicetype='$servicetype' ORDER BY soid ASC");
    if ($results) 
    {
 
  while($obj = $results->fetch_object())
        {
 
  echo '<div class="product">'; 
            echo '<form method="get" action="cart_update.php">';
			
  echo '<div class="product-content"><h3>'.$obj->service_inclusion.'</h3>';
            echo '<div class="product-desc">Price: '.$currency.$obj->price.' </div>';
            echo '<div class="product-desc">Service Type: '.$obj->servicetype.' </div>';
            echo '<div class="product-info">';
			echo '<button style="background:#F01818; color:white;border:0;">Add Services</button>';
			echo '</div></div>';
            echo '<input type="hidden" name="service_inclusion" value="'.$obj->service_inclusion.'" />';
            echo '<input type="hidden" name="type" value="add" />';
            echo '<input type="hidden" name="soid" value="'.$obj->soid.'" />';
			echo '<input type="hidden" name="return_url" value="'.$current_url.'" />';
            echo '</form>';
            echo '</div>';
        }
      }
    }
 
 ?>
    
 </div>
    
<div class="shopping-cart">
<h2>Your Shopping Cart</h2>
<?php
if(isset($_SESSION["products"]))
{
    $total = 0;
    echo '<ol>';
    if($_GET['budget'] > $cart_itm['price'])
    {
        $message = 'error';
    }
    else
    {
    foreach ($_SESSION["products"] as $cart_itm)
    {
 
  echo '<li class="cart-itm">';
        echo '<span class="remove-itm"><a href="cart_update.php?removep='.$cart_itm["code"].'&return_url='.$current_url.'">×</a></span>';
        echo '<h3>'.$cart_itm["name"].'</h3>';
        echo '<div class="p-price">Price :'.$currency.$cart_itm["price"].'</div>';
        echo '</li>';
        $subtotal = ($cart_itm["price"]);
        $Total = ($total + $subtotal);
        
   }echo'</ol>';
    echo '<span class="check-out-txt"><strong>Total : '.$currency.$Total.'</strong> <a href="view_cart.php">Check-out!</a></span>';
	echo '<span class="empty-cart"><a href="cart_update.php?emptycart=1&return_url='.$current_url.'">Empty Cart</a></span>';
}   }
else
{
    echo 'Your Cart is empty';
 
}}
?>
 
</div>
<div style="clear:both;"></div>    
</div>
<script type="text/javascript">
    <?php 
        if(isset($message))
        {
            echo "alert('$message')";
        }
    ?>
</script>

echo $timestamp = strtotime($_POST['dateFrom']);

public string HashString(string toHash)
{
    using (SHA512CryptoServiceProvider sha = new SHA512CryptoServiceProvider())
    {
        byte[] dataToHash = Encoding.UTF8.GetBytes(toHash);
        byte[] hashed = sha.ComputeHash(dataToHash);
        return Convert.ToBase64String(hashed);
    }
}
 
public string HashPassword(string password, string salt)
{
    string combined = password + salt;
    return HashString(combined);
}

Apache 2.
Apache was not able to cross-connect to remote host.