mysql_clean help plz

[Davie33]

Hi am trying to fix this code am working on with mysql_clean an am getting abit

confused with it can help me out with it?.

Am wanting the name of the topic to show here echo '<b>Topic - '.$blog['topic'].'</b>';.

 

<?php 
$id = mysql_clean($_GET['id']); 
$query = mysql_query("SELECT * FROM `blog` WHERE id = '$id'") or die(mysql_error());
$blog = mysql_fetch_array($query) or die(mysql_error());

echo '<b>Topic - '.$blog['topic'].'</b>';
?>

[Pikachu2000]

There is no predefined mysql_clean() function in php, and your question isn't very clear. What exactly is the problem? Include any errors returned by the code in your reply, please.

[Davie33]

Here is the error and ty for THE reply back

 

Fatal error: Call to undefined function mysql_clean() in C:\wamp\www\mini-arcade-games\templates\arcade\home.php on line 7

 

line 7 is $id = mysql_clean($_GET['id']);

 

Am trying to get the name of the topic to show

If i make topic and say i named it php codes then this part echo '<b>Topic - '.$blog['topic'].'</b>'; will show the name of the topic.

[Pikachu2000]

You're getting the error because there is supposed to be a user-defined function called mysql_clean() that needs to be included, but isn't. That's causing a fatal error and until you either include the function, find a way to do the same thing without it, or (and I really don't recommend this) don't use it at all, you'll have the same problem.

[jcbones]

Replace mysql_clean() with mysql_real_escape_string().

[Davie33]

Hi do u mean like this ? sry am still learning php.

<?php 
$id = mysql_real_escape_string($_GET['id']); 
$query = mysql_query("SELECT * FROM `blog` WHERE id = '$id'") or die(mysql_error());
$blog = mysql_fetch_array($query) or die(mysql_error());

echo '<b>Topic - '.$blog['topic'].'</b>';
?>

I guess not if its not working :S.

[jcbones]

That is correct.  What do you mean by "not working"?

[Davie33]

Hi i havent a clue am just getting a blank page apart from me header showing  .

[jcbones]

Post the full code.

[bspace]

mysql_real_escape_string() needs a connection to operate

mostly it'll just use the last open connection and therefore things will look ok

but if you haven't opened a connection then it won't operate

 

if this is the problem - try this instead

 

$search=array("\\","\0","\n","\r","\x1a","'",'"');
$replace=array("\\\\","\\0","\\n","\\r","\Z","\'",'\"');
$id = str_replace($search,$replace,$_GET['id']);

[jcbones]

If he hasn't opened a connection, then his query wouldn't work.  So the fix is to open a connection.

[Davie33]

bspace and jcbones thanks for the replys.

I think i need to make what jcbones said so am trying to make another file so both files connect.

Am trying to make a blog called face-twit and learning php.

If anyone would like to join and help out with coding if u have free time then i would set up a forum for it.