GET and query string

[dflow]

SELECT *
FROM country_list
WHERE CountryID = $row_RsPDetails['CountryID']

 

i want this query to GET the queried product's CountryID

 

 

what am i doing wrong?

 

[Yesideez]

Not a lot to go on, many things could be wrong.

 

Have you checked the contents of $row_RsPDetails['CountryID'] to see exactly what you're looking with?

[dflow]

lets try the logical part and maybe you have a solution

 

this is a product page filtered by the ProductID

each product has a unique CountryID

 

i want to get the CountryID without a CountryID url parameter

 

 

[Yesideez]

I can see what you're trying to do but without any code and any error message it's impossible to say what's wrong!

[Mark Baker]

On the database, is CountryID a VARCHAR2 or other character data type?

[Maq]

dflow, please post ALL the relevant code.  We don't know how $row_RsPDetails['CountryID'] is created.  Do you have debugging on for both PHP and your query statements? 

 

Like Yesideez said, we need more information or we're just guessing!

[dflow]

CountryID is VARCHAR

 

here is the code

 

<?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
  $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;    
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
}

$colname_RsPDetails = "-1";
if (isset($_GET['ProductID'])) {
  $colname_RsPDetails = $_GET['ProductID'];
}
mysql_select_db($database_international, $international);
$query_RsPDetails = sprintf("SELECT * FROM products WHERE ProductID = %s", GetSQLValueString($colname_RsPDetails, "int"));
$RsPDetails = mysql_query($query_RsPDetails, $international) or die(mysql_error());
$row_RsPDetails = mysql_fetch_assoc($RsPDetails);
$totalRows_RsPDetails = mysql_num_rows($RsPDetails);

mysql_select_db($database_international, $international);
$query_RsCountry = "SELECT * FROM country_list WHERE CountryID = $row_RsPDetails['CountryID']";
$RsCountry = mysql_query($query_RsCountry, $international) or die(mysql_error());
$row_RsCountry = mysql_fetch_assoc($RsCountry);
$totalRows_RsCountry = mysql_num_rows($RsCountry);
?>

[flyhoney]

Hows about using your formatting function on that query:

 

<?php
$query_RsCountry = sprintf("SELECT * FROM country_list WHERE CountryID = %s", GetSQLValueString($row_RsPDetails['CountryID'], 'int'));
?>

[revraz]

Non Integers need a single quote around them in your Query.

[flyhoney]

Oh, just realized you said CountryID is a varchar.

 

<?php
$query_RsCountry = sprintf("SELECT * FROM country_list WHERE CountryID = %s", GetSQLValueString($row_RsPDetails['CountryID'], 'text'));
?>

[dflow]

thx works like a charm