mrMarcus Posted April 29, 2009 Share Posted April 29, 2009 what i mean is, is the db insert query correct when you have 'price crap' in there? just that it's not executing as per the number of items in the cart? just working on process of elimination here. Quote Link to comment Share on other sites More sharing options...
millercj Posted April 29, 2009 Author Share Posted April 29, 2009 Yes my db structure is OrderData(tid, itemName, itemNumber, qty, price) Quote Link to comment Share on other sites More sharing options...
millercj Posted April 29, 2009 Author Share Posted April 29, 2009 I've narrowed it down to where the problem is but it makes NO sense... It's the INSERT INTO query this works: $struery = "insert into OrderData(tid,itemname,itemnumber,qty) values ('".$txn_id."','".$_POST[$itemname]."','".$_POST[$itemnumber]."','".$_POST[$quantity]."')"; This does not: $struery = "insert into OrderData(tid,itemname,itemnumber,qty,price) values ('".$txn_id."','".$_POST[$itemname]."','".$_POST[$itemnumber]."','".$_POST[$quantity]."','123')"; Quote Link to comment Share on other sites More sharing options...
millercj Posted April 30, 2009 Author Share Posted April 30, 2009 I found it! and i want to hit myself. I was always using the same products to test it. One of them has an ' in the item name "Lover's Combo" and it was effing it all up. Quote Link to comment Share on other sites More sharing options...
mrMarcus Posted April 30, 2009 Share Posted April 30, 2009 next step .. db sanitizing. glad to hear it's working. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.