get user details from mysql database using php?

[ckerr27]

I have created a button which when pressed should present the user with their details (whoever is logged in), here is the form code:

 

<form id="form1" name="form1" method="post" action="getdetails.php">

 

  <input type="submit" name="Get Details" value="Get Details" />

  </label>

 

  </p>

</form>

 

Here is the getdetails.php file

 

<?php

mysql_connect("localhost","root","");

mysql_select_db("test");

$username = $_POST['textfield'];

  echo '</br>';

$query = mysql_query("SELECT * FROM membersdetails WHERE name=`$username` ");

 

while($result = mysql_fetch_array($query)) {

//display

echo $result['firstname'];

echo $result['surname'];

}

?>

 

Its not workin at all I have attacthed the error i am getting

 

Any help please?

[gristoi]

where are you declaring textfield in your form?

 

[ckerr27]

$username = $_POST['textfield'];

 

What should be in here?

[gristoi]

<form id="form1" name="form1" method="post" action="getdetails.php">

  <input type="submit" name="Get Details" value="Get Details" />
   </label>
   
  </p>
</form>

should be something like:

<form id="form1" name="form1" method="post" action="getdetails.php">
   username <input type="text" name="textfield" value ='' />
  <input type="submit" name="Get Details" value="Get Details" />
   </label>
   
  </p>
</form>

[ckerr27]

Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in C:\wamp\www\website\getdetails.php on line 8

 

This is the error im recieving now, although the form is better looking

[litebearer]

use single quotes not backticks for your variables in you query

[ckerr27]

I have changed the quotes and still recieve the same error message. I think the error lies with this line

 

$query = mysql_query("SELECT * FROM membersdetails WHERE name=`$username` ");

[MSUK1]

$query = mysql_query("SELECT * FROM membersdetails WHERE name=`$username` ");

 

should be

 

$query = mysql_query("SELECT * FROM membersdetails WHERE name='$username' ");

 

you are still using backticks

[ckerr27]

<?php

mysql_connect("localhost","root","");

mysql_select_db("test");

$username = $_POST['textfield'];

  echo '</br>';

$query = mysql_query("SELECT * FROM memberdetails WHERE name='$username' ");

 

while($result = mysql_fetch_array($query)) {

//display

echo $result['firstname'];

echo $result['surname'];

}

?>

 

I think the error is on this line:

 

while($result = mysql_fetch_array($query)) {

 

i have attatched the error message to see if it helps

 

Thanks

[chriscloyd]

<?php 
mysql_connect("localhost","root",""); 
mysql_select_db("test"); 
$username = mysql_real_escape_string($_POST['textfield']);
$query = mysql_query("SELECT * FROM memberdetails WHERE name = '{$username}' ");

while($result = mysql_fetch_assoc($query)) {
//display
echo $result['firstname'];
echo $result['surname'];
}
?>