How do I pull this off?

[ronnie88]

<?php
//include db connect
include 'db.php';

$url = '<img src="http://www.versionxgaming.com/forum/images/ranks/$lastname"/>';
$userid = $_POST['userid'];
$firstname = $_POST['firstname'];
$lastname = $_POST['lastname'];
$username = $_POST['username'];
    
        // Update data
        $update = mysql_query("UPDATE `users` SET members = '$firstname', rank = '$url', xfire = '$username' WHERE userid = '$userid'") or die ('Error Updating Data! <br />' .mysql_error());
        
        echo "Update successful $firstname has been updated";
?>

 

Okay here it goes the url variable works fine but doesn't post the $lastname variable how do I make it post last name variable...

[ronnie88]

Nevermind I got it used this instead

<?php
//include db connect
include 'db.php';

$userid = $_POST['userid'];
$firstname = $_POST['firstname'];
$lastname = $_POST['lastname'];
$username = $_POST['username'];
$url = '<img src="http://www.versionxgaming.com/forum/images/ranks/';
$end = '"/>';
    
        // Update data
        $update = mysql_query("UPDATE `users` SET members = '$firstname', rank = '$url$lastname$end', xfire = '$username' WHERE userid = '$userid'") or die ('Error Updating Data! <br />' .mysql_error());
        
        echo "Update successfull $firstname has been updated";
?>

 

thanks though

[Daniel0]

You might also want to lookup SQL injections and XSS so you can close those security holes.

 

They're mentioned in this tutorial: http://www.phpfreaks.com/tutorial/php-security