PHP variable error/file_put_contents error [closed] - php

Question

Closed. This question needs details or clarity. It is not currently accepting answers.
Want to improve this question? Add details and clarify the problem by editing this post.
Closed 5 years ago.
Improve this question
I am trying to use the file_put_contents() to create user specific pages. When a user first enters their account, I want the site to create a page that is accessible only by the user at mydomain.com/users/username.php. If they are not the user, then I am trying to redirect them to their own account page (because the users/username.html contains sensitive info). As such, I use this code in the username.html:
<?php
$actual_link='http://'.$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF'];
$net = $actual_link['filename'];
if($_SESSION['username']==$net){
echo 'Verified';
}
else{
header('Location:mydomain.com/user/welcome.php');
}
?>
This, hypothetically, would keep unauthorized users off of the page. To create the page for each user (and keep it scalable), I used
file_put_contents($urlphp,$phpstuff)
(I decided not use FILE_APPEND because the file shouldn't exist). $urlphp is the username ($_SESSION['username']) combined with .php, and $phpstuff is all of teh that I put above. This is where I think I went wrong. I typed:
$phpstuff = "<?php
$actual_link='http://'.$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF'];
$net = $actual_link['filename'];
if($_SESSION['username']==$net){
echo 'Verified';
}
else{
header('Location:mydomain.com/user/welcome.php');
}
?>"
However, this code produced:
Parse error: syntax error, unexpected '' (T_ENCAPSED_AND_WHITESPACE), expecting identifier (T_STRING) or variable (T_VARIABLE) or number (T_NUM_STRING) in path/to/users/welcome.php on line 35
Line 35 is:
$actual_link='http://'.$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF'];
However, (and keep in mind here, I'm relatively new to PHP/MySQL, so I'm going off of what I know and what PHP.net and W3Schools tell me) I couldn't find any whitespace in line 35. So I assumed that you can't have a multi-line variable (which wouldn't be detrimental to the code. I think....), so I tried making it all one line, which produced the exact same error, but moved the problematic line up one.
What I can't figure out is if it's a problem with my use of file_put_contents() or my use of the variable $phpstuff. If there is anything that I missed, please point it out, I am almost positive it is something that I'm overlooking. I am at a loss as to what to do/try. All help is appreciated. Thanks!

Answer 1

Don't do it this way.
Instead of generating PHP dynamically and creating a file for each separate user (which is wrong in so many ways), have one file that handles all users, and then pass the username / userid as a parameter to the script.
You could use .htaccess to route all requests for /users/.php to, /users/index.php?user=.