Học php, mysql và javascript - p 45 pps

Finally the image is saved as a jpeg file in the location defined by the variable $saveto,
after which both the original and the resized image canvases are removed from memory
using the imagedestroy function, returning the memory that was used.
Displaying the Current Profile
Last but not least, so that the user can see what the current profile looks like before
editing it, the showProfile function from rnfunctions.php is called prior to outputting
the form HTML. If no profile exists yet, nothing will be displayed.
The result of loading Example 20-9 into a browser is shown in Figure 20-4, where you
can see that the textarea has been prepopulated with the “about me” text.
Figure 20-4. Editing a user profile
rnprofile.php | 421
Example 20-9. rnprofile.php
<?php // rnprofile.php
include_once 'rnheader.php';
if (!isset($_SESSION['user']))
die("<br /><br />You need to login to view this page");
$user = $_SESSION['user'];
echo "<h3>Edit your Profile</h3>";
if (isset($_POST['text']))
{
$text = sanitizeString($_POST['text']);
$text = preg_replace('/\s\s+/', ' ', $text);
$query = "SELECT * FROM rnprofiles WHERE user='$user'";
if (mysql_num_rows(queryMysql($query)))
{
queryMysql("UPDATE rnprofiles SET text='$text'
where user='$user'");
}
else
{
$query = "INSERT INTO rnprofiles VALUES('$user', '$text')";

queryMysql($query);
}
}
else
{
$query = "SELECT * FROM rnprofiles WHERE user='$user'";
$result = queryMysql($query);
if (mysql_num_rows($result))
{
$row = mysql_fetch_row($result);
$text = stripslashes($row[1]);
}
else $text = "";
}
$text = stripslashes(preg_replace('/\s\s+/', ' ', $text));
if (isset($_FILES['image']['name']))
{
$saveto = "$user.jpg";
move_uploaded_file($_FILES['image']['tmp_name'], $saveto);
$typeok = TRUE;
switch($_FILES['image']['type'])
{
case "image/gif": $src = imagecreatefromgif($saveto); break;
case "image/jpeg": // Both regular and progressive jpegs
case "image/pjpeg": $src = imagecreatefromjpeg($saveto); break;
422 | Chapter 20: Bringing It All Together
case "image/png": $src = imagecreatefrompng($saveto); break;
default: $typeok = FALSE; break;
}
if ($typeok)

{
list($w, $h) = getimagesize($saveto);
$max = 100;
$tw = $w;
$th = $h;
if ($w > $h && $max < $w)
{
$th = $max / $w * $h;
$tw = $max;
}
elseif ($h > $w && $max < $h)
{
$tw = $max / $h * $w;
$th = $max;
}
elseif ($max < $w)
{
$tw = $th = $max;
}
$tmp = imagecreatetruecolor($tw, $th);
imagecopyresampled($tmp, $src, 0, 0, 0, 0, $tw, $th, $w, $h);
imageconvolution($tmp, array( // Sharpen image
array(−1, −1, −1),
array(−1, 16, −1),
array(−1, −1, −1)
), 8, 0);
imagejpeg($tmp, $saveto);
imagedestroy($tmp);
imagedestroy($src);
}

}
showProfile($user);
echo <<<_END
<form method='post' action='rnprofile.php'
enctype='multipart/form-data'>
Enter or edit your details and/or upload an image:<br />
<textarea name='text' cols='40' rows='3'>$text</textarea><br />
Image: <input type='file' name='image' size='14' maxlength='32' />
<input type='submit' value='Save Profile' />
</pre></form>
_END;
?>
rnprofile.php | 423
rnmembers.php
Using Example 20-10, rnmembers.php, your users will be able to find other members
and choose to add them as friends (or drop them if they are already friends). This
program has two modes. The first lists all members and their relationships to you, and
the second shows a user’s profile.
Viewing a User’s Profile
The code for the latter mode comes first, where a test is made for the GET variable
'view'. If it exists, a user wants to view someone’s profile, so the program does that
using the showProfile function, along with providing a couple of links to the user’s
friends and messages.
Adding and Dropping Friends
After that the two GET variables 'add' and 'remove' are tested. If one or the other has a
value, it will be the username of a user to either add or drop as a friend. This is achieved
by looking the user up in the MySQL rnfriends table and either inserting a friend
username or removing it from the table.
And, of course, every posted variable is first passed through sanitizeString to ensure
it is safe to use with MySQL.

Listing All Members
The final section of code issues a SQL query to list all usernames. The code places the
number returned in the variable $num before outputting the page heading.
A for loop then iterates through each and every member, fetching their details and then
looking them up in the rnfriends table to see if they are either being followed by or a
follower of the user. If someone is both a follower and a followee, they are classed as a
mutual friend. By the way, this section of code is particularly amenable to a template
solution such as Smarty.
The variable $t1 is nonzero when the user is following another member, and $t2 is
nonzero when another member is following the user. Depending on these values, text
is displayed after each username showing their relationship (if any) to the current user.
Icons are also displayed to show the relationships. A double pointing arrow means that
the users are mutual friends. A left-pointing arrow indicates the user is following an-
other member. And a right-pointing arrow indicates that another member is following
the user.
Finally, depending on whether the user is following another member, a link is provided
to either add or drop that member as a friend.
424 | Chapter 20: Bringing It All Together
When you call Example 20-10 up in a browser, it will look like Figure 20-5. See how
the user is invited to “follow” a nonfollowing member, but if the member is already
following the user, a “recip” link to reciprocate the friendship is offered. In the case of
a user already following another member, the user can select “drop” to stop the
following.
Figure 20-5. Using the members module
Example 20-10. rnmembers.php
<?php // rnmembers.php
include_once 'rnheader.php';
if (!isset($_SESSION['user']))
die("<br /><br />You must be logged in to view this page");
$user = $_SESSION['user'];

if (isset($_GET['view']))
{
$view = sanitizeString($_GET['view']);
if ($view == $user) $name = "Your";
else $name = "$view's";
echo "<h3>$name Page</h3>";
showProfile($view);
echo "<a href='rnmessages.php?view=$view'>$name Messages</a><br />";
die("<a href='rnfriends.php?view=$view'>$name Friends</a><br />");
}
rnmembers.php | 425
if (isset($_GET['add']))
{
$add = sanitizeString($_GET['add']);
$query = "SELECT * FROM rnfriends WHERE user='$add'
AND friend='$user'";
if (!mysql_num_rows(queryMysql($query)))
{
$query = "INSERT INTO rnfriends VALUES ('$add', '$user')";
queryMysql($query);
}
}
elseif (isset($_GET['remove']))
{
$remove = sanitizeString($_GET['remove']);
$query = "DELETE FROM rnfriends WHERE user='$remove'
AND friend='$user'";
queryMysql($query);
}
$result = queryMysql("SELECT user FROM rnmembers ORDER BY user");

$num = mysql_num_rows($result);
echo "<h3>Other Members</h3><ul>";
for ($j = 0 ; $j < $num ; ++$j)
{
$row = mysql_fetch_row($result);
if ($row[0] == $user) continue;
echo "<li><a href='rnmembers.php?view=$row[0]'>$row[0]</a>";
$query = "SELECT * FROM rnfriends WHERE user='$row[0]'
AND friend='$user'";
$t1 = mysql_num_rows(queryMysql($query));
$query = "SELECT * FROM rnfriends WHERE user='$user'
AND friend='$row[0]'";
$t2 = mysql_num_rows(queryMysql($query));
$follow = "follow";
if (($t1 + $t2) > 1)
{
echo " &harr; is a mutual friend";
}
elseif ($t1)
{
echo " &larr; you are following";
}
elseif ($t2)
{
$follow = "recip";
echo " &rarr; is following you";
}
if (!$t1)
{
426 | Chapter 20: Bringing It All Together

echo " [<a href='rnmembers.php?add=".$row[0] . "'>$follow</a>]";
}
else
{
echo " [<a href='rnmembers.php?remove=".$row[0] . "'>drop</a>]";
}
}
?>
On a production server, there could be thousands or even hundreds of
thousands of users,
so you would probably substantially modify this
program to include searching the “about me” text, and support paging
of the output a screen at a time.
rnfriends.php
The module that shows a user’s friends and followers is Example 20-11,
rnfriends.php. This interrogates the rnfriends table just like the rnmembers.php pro-
gram, but only for a single user. It then shows all of that user’s mutual friends and
followers along with the people they are following.
All the followers are saved into an array called $followers and all the people being
followed are placed in an array called $following. Then a neat piece of code is used to
extract all those that are both following and followed by the user, like this:
$mutual = array_intersect($followers, $following);
The array_intersect function extracts all members common to both arrays and returns
a new array containing only those people. This array is then stored in $mutual. Now
it’s possible to use the array_diff function for each of the $followers and $following
arrays to keep only those people who are not mutual friends, like this:
$followers = array_diff($followers, $mutual);
$following = array_diff($following, $mutual);
This results in the array $mutual containing only mutual friends, $followers containing
only followers (and no mutual friends), and $following containing only people being

followed (and no mutual friends).
Armed with these arrays, it’s a simple matter to separately display each category of
members, as can be seen in Figure 20-6. The PHP sizeof function returns the number
of elements in an array; here I use it just to trigger code when the size is nonzero (that
is, friends of that type exist). Note how, by using the variables $name1, $name2, and
$name3 in the relevant places, the code can tell when you’re looking at your own friends
list, using the words Your and You are, instead of simply displaying the username.
rnfriends.php | 427
Figure 20-6. Displaying a user’s friends and followers
Example 20-11. rnfriends.php
<?php // rnfriends.php
include_once 'rnheader.php';
if (!isset($_SESSION['user']))
die("<br /><br />You need to login to view this page");
$user = $_SESSION['user'];
if (isset($_GET['view'])) $view = sanitizeString($_GET['view']);
else $view = $user;
if ($view == $user)
{
$name1 = "Your";
$name2 = "Your";
$name3 = "You are";
}
else
{
$name1 = "<a href='rnmembers.php?view=$view'>$view</a>'s";
$name2 = "$view's";
$name3 = "$view is";
}
echo "<h3>$name1 Friends</h3>";

showProfile($view);
$followers = array(); $following = array();
428 | Chapter 20: Bringing It All Together
$query = "SELECT * FROM rnfriends WHERE user='$view'";
$result = queryMysql($query);
$num = mysql_num_rows($result);
for ($j = 0 ; $j < $num ; ++$j)
{
$row = mysql_fetch_row($result);
$followers[$j] = $row[1];
}
$query = "SELECT * FROM rnfriends WHERE friend='$view'";
$result = queryMysql($query);
$num = mysql_num_rows($result);
for ($j = 0 ; $j < $num ; ++$j)
{
$row = mysql_fetch_row($result);
$following[$j] = $row[0];
}
$mutual = array_intersect($followers, $following);
$followers = array_diff($followers, $mutual);
$following = array_diff($following, $mutual);
$friends = FALSE;
if (sizeof($mutual))
{
echo "<b>$name2 mutual friends</b><ul>";
foreach($mutual as $friend)
echo "<li><a href='rnmembers.php?view=$friend'>$friend</a>";
echo "</ul>";
$friends = TRUE;

}
if (sizeof($followers))
{
echo "<b>$name2 followers</b><ul>";
foreach($followers as $friend)
echo "<li><a href='rnmembers.php?view=$friend'>$friend</a>";
echo "</ul>";
$friends = TRUE;
}
if (sizeof($following))
{
echo "<b>$name3 following</b><ul>";
foreach($following as $friend)
echo "<li><a href='rnmembers.php?view=$friend'>$friend</a>";
$friends = TRUE;
}
if (!$friends) echo "<ul><li>None yet";
rnfriends.php | 429
echo "</ul><a href='rnmessages.php?view=$view'>View $name2 messages</a>";
?>
rnmessages.php
The last of
the main modules is Example 20-12, rnmessages.php. The program starts
by checking whether a message has been posted in the POST variable 'text'. If so, it is
inserted into the rnmessages table. At the same time, the value of 'pm' is also stored.
This indicates whether a message is private or public. A 0 represents a public message
and 1 is private.
Next, the user’s profile and a form for entering a message are displayed, along with
radio buttons to choose between a private or public message. After this, all the messages
are shown, depending on whether they are private or public. If they are public, all users

can see them, but private messages are visible only to the sender and recipient. This is
all handled by a couple of queries to the MySQL database. Additionally, when a mes-
sage is private, it is introduced by the word “whispered” and shown in italic.
Finally, the program displays a couple of links to refresh the messages, in case another
user has posted one in the meantime, and to view the user’s friends. The trick using
the variables $name1 and $name2 is again used so that when you view your own profile
the word Your is displayed instead of the username.
You can see the result of viewing this program with a browser in Figure 20-7. Note how
users viewing their own messages are provided with links to erase any they don’t want.
Figure 20-7. The messaging module
430 | Chapter 20: Bringing It All Together