PHP Code:

// db properties
define('DBHOST','host');
define('DBUSER','user');
define('DBPASS','pass');
define('DBNAME','name');

// make a connection to mysql here
$conn = mysql_connect (DBHOST, DBUSER, DBPASS);
$conn = mysql_select_db (DBNAME);
if(!$conn){
    die( "Sorry! There seems to be a problem connecting to our database.");
}
$sql = mysql_query("SELECT Username, Email FROM sitelok WHERE Email='".$_SESSION['ses_slemail']."' AND Username='".$_SESSION["ses_slusername"]."' ")or die(mysql_error());
$n = mysql_num_rows($sql);
if($n == $_SESSION['ses_slemail']){} else {
linklokShowMessage($ErrorTemplate,"The email address provided does not match the email of the logged in user<BR><BR>Click your browsers BACK button and try again.");
exit;
} 


Is there an error message or description of the problem to go along with that code?

i have a script called linklokurl.php which email a temporary download link to an email adress entered to a form in demoform.php..
wat i need to do is check if the entered email matches with the email of the logged in user.... do u want me to paste the code of that php files?

if u might wanna look at those php files.. here is the linklokurl http://pastie.org/1071315

and here is the demoform
http://pastie.org/1071319

Oops.. mysql_num_rows returns number of rows retrived.. ie an integer..

your are trying to check it against a session variable which holds an mail id. so the condition will always fail in your case..

Instead try this..

if($n != 0){} else {
linklokShowMessage($ErrorTemplate,"The email address provided does not match the email of the logged in user<BR><BR>Click your browsers BACK button and try again.");
exit;
}

hey bro that doesnt solve the problem.... it still email the code to what ever email i enter... doesnt check if entered email matches with the logged in users email..
so when i paste the code u send.. here is it look like.. is there any problem....

PHP Code:

// db properties
define('DBHOST','host');
define('DBUSER','user');
define('DBPASS','pass');
define('DBNAME','name');

// make a connection to mysql here
$conn = mysql_connect (DBHOST, DBUSER, DBPASS);
$conn = mysql_select_db (DBNAME);
if(!$conn){
    die( "Sorry! There seems to be a problem connecting to our database.");
}
$sql = mysql_query("SELECT Username, Email FROM sitelok WHERE Email='".$_SESSION['ses_slemail']."' AND Username='".$_SESSION["ses_slusername"]."' ")or die(mysql_error());
$n = mysql_num_rows($sql);
if($n != 0){} else {
linklokShowMessage($ErrorTemplate,"The email address provided does not match the email of the logged in user<BR><BR>Click your browsers BACK button and try again.");
exit;
} 


Ok, first echo the query like,

PHP Code:


$sql = "SELECT Username,Email FROM sitelok WHERE Email='".$_SESSION['ses_slemail']."' AND Username='".$_SESSION["ses_slusername"]."'";  

echo $sql; 


query will be printed in the browser, copy the query and test it in your query browser (PhpMyAdmin etc) and see whether you get the correct result.

also check the session values

PHP Code:


echo '<PRE>';
print_r($_SESSION); 


if there is any issue, correct it and try it.

evrything works ok... i mean it prints the query.. and also the session.... but i still cant figure out why it sends mail to any email... doesnt check if it matches with the logged in users email..