Jump to content

WatsonN

Members
  • Posts

    227
  • Joined

  • Last visited

Posts posted by WatsonN

  1. @scootstah Thank you very much for explaining that.

     

    I was quite happy having gotten the grasp of the mysql functions

    I agree, but if mysqli is better I'll be glad to use it. It gives me a reason to make new stuff and play with my old code.
  2. I have the same question, I have always used MySQL but now i'm hearing I should be using MySQLi?

    If so, why? What is so much better about this versus the old MySQL? I am simply curious.

     

    Thank you

  3. If you do it the way you are doing it, via the address bar, I would use custom names instead the file name.

    If you don't someone could call a filename and load one.

     

    You are not losing Google juice from doing that

     

    I personally include the header and footer but you can do it either way, it won't make a difference to the user.

  4. You can use mysql_real_escape_string()  to prevent injections from user content.

     

    http://php.net/manual/en/function.mysql-real-escape-string.php

     

    A MySQL connection is required before using mysql_real_escape_string() otherwise an error of level E_WARNING is generated, and FALSE is returned. If link_identifier isn't defined, the last MySQL connection is used.

     

    Note:

     

    If magic_quotes_gpc is enabled, first apply stripslashes() to the data. Using this function on data which has already been escaped will escape the data twice.

     

    Note:

     

    If this function is not used to escape data, the query is vulnerable to SQL Injection Attacks.

     

    Note: mysql_real_escape_string() does not escape % and _. These are wildcards in MySQL if combined with LIKE, GRANT, or REVOKE

     

     

    EDIT: added notes

  5. Yep, I messed that one up.

    I tried to take a post from a diffrent thread and it was something like this:

    foreach($_POST['resource_from_label'] as $key => $value) {
      $quantity = (!empty($_POST['quantity'][$key])) ? intval($_POST['quantity'][$key]) : 0;
    if($quantity > 0) {
    $arr[] = "('$value','$quantity')";
    }
    }
    
    $arr_to_string = 'Item, quantity ' . implode(' , ',$arr);
    
    echo $arr_to_string;

     

    But now looking at it his second was quantity and was a number not an actual text value

     

    The post I found: "What is the easiest way to make this function"

  6. @sunfighter to insert it into a DB

    @sasa artist is not numeric

     

    The form:

    				<form name="Songs" id="Songs" method="post" action="testpost.php">
    		<div id="form">
    			<div class="grid_5">
    			<input type="text" name="Title[]" />
    			</div>
    			<div class="grid_5">
    			<input type="text" name="Artist[]" />
    			</div>
    			<div class="grid_5">
    			<input type="text" name="Album[]" />
    			</div>
    		</div>
    			<div class="grid_16">
    				<input type="button" value="Add 5 more rows" onClick="addInput('form');">
    				<input type="submit" value="Submit">
    

     

    And it will expand as needed up to 200 rows

  7. I have a DB INSERT in a script and that works just fine, The problem is that I can't figure out how to get the ID for that entry I just added. I tried using a combonation of SELECT and mysql_fetch_row and a few other varaitions but I can't get to get the data I need.

    $PostedID = mysql_query("SELECT ID FROM Playlists WHERE `UID` = '{$_SESSION['ID']}' & `Title` = '{$Title}' & `Description` = '{$Description}' & `delete` = '0'");
    $POSTid = mysql_fetch_row($PostedID);

     

    Here is the INSERT that I used

    mysql_query("INSERT INTO `Playlists` (`UID`, `Title`, `Description`, `date`, `Author`) VALUES ('{$_SESSION['ID']}', '{$Title}', '{$Description}', NOW(), '{$_SESSION['UID']}')") or die(mysql_error());

     

    I know the SESSION variables look backwards but I promise they aren't

     

    I'm just not sure what it would take to get this to return correctly

  8. I'm working on a dynamically expanding form and that works just fine, for now.

    I searched the forums and the manual and can't figure out how to make this work right.

     

    There are three fields Title Artist and Album. That submits into a form and then needs to be put into a database.

    The problem is, I don't know how to correctly form the loop to do it.

    I tried variations of

    foreach($_POST['Title'] as $key => $Title) {
    foreach($_POST['Artist'] as $key => $Artist) {
    	foreach($_POST['Album'] as $key => $Album) {
    	}
    }
    }

    and

    foreach($_POST['Title'] as $key => $value) {
    if( !empty($_POST['Artist'][$key]) ){
       $Artist = intval($_POST['Artist'][$key]);
    }else{
       $Artist = 0;
    }
    if( !empty($_POST['Album'][$key]) ){
       $Album = intval($_POST['Album'][$key]);
    }else{
       $Album = 0;
    }
    if($Artist > 0) {
    $arr[] = "('$value','$Artist','$Album')";
    }
    }

     

    But I can't get it to a usable state. Any ideas or something I might have missed?

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.