[SOLVED] How to query database if ...

[dhimok]

Hello, I have a question if u might help me.

 

I want to redirect to error page if trying to enter a page or article where id does not exist or is deleted.

Let s say that the last record is 30 and if someone tries to abuse the site and enters ?c=60. The db query of course does not find any records. So how can I query the database and send them somewhere else if this happens?

 

Thanks in advance

[pocobueno1388]

You just check to see if what they entered in the URL is fixed or not...

 

<?php

$c = $_GET['c'];

$sql = mysql_query("SELECT col1, col2 FROM table WHERE c='$c'"):

   if (mysql_num_rows($sql) <= 0){
      //redirect them
   } else {
      //display page information
   }

?>

 

[dhimok]

well I used this one. It works well, just wonder if its good enough

 

$sql = "SELECT * FROM table WHERE id = '" . $_GET['c'] . "'";
$res = dbQuery($sql) or die(mysql_error());
if(dbNumRows($res) == 0)
header("location: error_page.html");

[boo_lolly]

after you declare your query, but before you print your results, place this piece of code in there:

if(mysql_num_rows($query) < 1){
        header('Location: http://www.your_domain/')
}

[dhimok]

Thats what I thought, thank you