anyone check this code plss!

[mtvaran]

try
   {
$sql   = "SELECT StudentID,CourseID FROM student,course WHERE StudentID =" . $_POST['sid']  AND CourseID =".$_POST['cid'] ; //-----> error line

    $query = mysql_query($sql) or trigger_error('MySQL error: ' . mysql_error());

    if (mysql_num_rows($query) > 0)
    {
        throw new Exception('StudentID already taken');
    }
}

 

NB: basicaly im inserting data into a table from another two table field.

[sasa]

add . " after $_POST['sid']

$sql   = "SELECT StudentID,CourseID FROM student,course WHERE StudentID =" . $_POST['sid'] . "  AND CourseID =".$_POST['cid'] ;

[mtvaran]

still i get error msg. im bit new & stupid with php. so i just post all of my coding so could any1 check this for me plss

<?php

$con = mysql_connect("localhost","root","");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

  mysql_select_db("uni", $con)or trigger_error('MySQL error: ' . mysql_error());
   try
   {
$sql   = "SELECT StudentID,CourseID FROM take WHERE StudentID =" . $_POST['sid'] . " AND CourseID =" .$_POST['cid'] ;
    $query = mysql_query($sql) or trigger_error('MySQL error: ' . mysql_error());

    if (mysql_num_rows($query) > 0)
    {
        echo'StudentID already taken';
    }
}
if (!empty($_POST['sid']) && !empty($_POST['cid'])) //-------> error line
{
    $ct = 0;
    $student = $_POST['sid'];
    foreach ($_POST['cid'] as $key => $course)
    {
     $sql = "INSERT INTO take (StudentID, CourseID) VALUES('".mysql_real_escape_string($student)."','".mysql_real_escape_string($course)."')";
     $query = mysql_query($sql) or trigger_error('MySQL error: ' . mysql_error());
     if (mysql_affected_rows() > 0){$ct++;}
     }
    echo $ct . ' rows added.';
}  

mysql_close($con);

?>

 

[Pikachu2000]

It would be helpful to also post the error message.

[mtvaran]

this is the error msg....

Parse error: parse error, expecting `T_CATCH' in

[sasa]

<?php

$con = mysql_connect("localhost","root","");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

  mysql_select_db("uni", $con)or trigger_error('MySQL error: ' . mysql_error());
   try
   {
$sql   = "SELECT StudentID,CourseID FROM take WHERE StudentID =" . $_POST['sid'] . " AND CourseID =" .$_POST['cid'] ;
    $query = mysql_query($sql) or trigger_error('MySQL error: ' . mysql_error());

    if (mysql_num_rows($query) > 0)
    {
        echo'StudentID already taken';
    }
}
if (!empty($_POST['sid']) && !empty($_POST['cid'])) //-------> error line
{
    $ct = 0;
    $student = $_POST['sid'];
    foreach ($_POST['cid'] as $key => $course)
    {
     $sql = "INSERT INTO take (StudentID, CourseID) VALUES('".mysql_real_escape_string($student)."','".mysql_real_escape_string($course)."')";
     $query = mysql_query($sql) or trigger_error('MySQL error: ' . mysql_error());
     if (mysql_affected_rows() > 0){$ct++;}
     }
    echo $ct . ' rows added.';
}  

mysql_close($con);

?>

[radar]

// sql query was here, new code supplied shows new error.