mricketts Posted August 30, 2014 Share Posted August 30, 2014 (edited) I changed web hosting companies and now a php form that was working is no longer working. I haven't been able to figure out what the problem is. The form is a simple text input form that adds the text to a database. Every time the user inserts text with a comma, an error occurs. Below is the code for the form. Any help is much appreciated. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title></title> <link href="style.css" rel="stylesheet" type="text/css" /> </head> <body> <?php require_once('inc/header.html'); ?> <?php require_once('../Connections/websitedatabase.php'); ?> <?php if (isset($_POST['note'])): $note = $_POST['note']; $name = $_POST['name']; $id = $_POST['id']; $sql = "UPDATE presidentnotes SET note='$note', name='$name' "; if (@mysql_query($sql)) { echo '<p>The note has been updated.</p>'; } else { echo '<p>Error updating note. Details: ' . mysql_error() . '</p>'; } ?> <?php else: $presidentnotes = @mysql_query( "SELECT note, name FROM presidentnotes "); if (!$presidentnotes) { exit('<p>Error fetching note details: ' . mysql_error() . '</p>'); } $presidentnotes = mysql_fetch_array($presidentnotes); $note = $presidentnotes['note']; $name = $presidentnotes['name']; $note = mysql_real_escape_string($note); $name = mysql_real_escape_string($name); ?> <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post"> <h1>President's Note on hompage - Edit5</h1> <label>Note:<br /> <textarea name="note" cols="100" rows="12"><?php echo $note; ?></textarea> </label><br /> <label>Name:<br /> <input name="name" type="text" value="<?php echo $name; ?>" size="40" /></label><br /> <input type="hidden" name="id" value="<?php echo $id; ?>" /> <input type="submit" value="SUBMIT" /></p> </form> <p> <?php endif; ?> <p> </p> </body> </html> Edited August 30, 2014 by mricketts Quote Link to comment Share on other sites More sharing options...
mac_gyver Posted August 30, 2014 Share Posted August 30, 2014 post the error message you are getting and post an example of an input data value causes the error. Quote Link to comment Share on other sites More sharing options...
jcbones Posted August 30, 2014 Share Posted August 30, 2014 1. Switch to PDO 2. You should be escaping values on the input and not the output. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.