[SOLVED] Escaping single/double

[rawky1976]

Hello

 

I'm having trouble with single and double quote nesting; i know this is wrong, but why?

 

$query = "SELECT CONCAT(client_lname, ', ',client_fname) AS name FROM clients ASC WHERE client_lname = $_POST['editclient']";

[teng84]

maybe

$query = "SELECT CONCAT(client_lname, ', ',client_fname) AS name FROM clients ASC WHERE client_lname = ".$_POST['editclient'];
or
$query = "SELECT CONCAT(client_lname, ', ',client_fname) AS name FROM clients ASC WHERE client_lname = '".$_POST['editclient']."'";

or
$query = "SELECT CONCAT(client_lname, ', ',client_fname) AS name FROM clients ASC WHERE client_lname = {$_POST['editclient']}";

[Fadion]

$query = "SELECT CONCAT(client_lname, ', ',client_fname) AS name FROM clients ASC WHERE client_lname = '{$_POST['editclient']}'";

[rawky1976]

Notice: Undefined index: editclient in C:\inetpub\wwwroot\***\***.php on line 53

 

This refers to the $editclient variable since I changed to the above?

 

[lemmin]

That means that there is no key inside the array $_POST named "editclient". To see the keys, do a "print_r($_POST)" and the keys are the ones in square brackets.

[rawky1976]

what if editclient is just a text input in a form, not an array. Would that change things?

[Fadion]

$_POST is actually an array and 'editclient' is an array key or index. The code should work like that so be sure to have a textfield called 'editclient'. Anyway try this different approach but should give the same results:

 

$editclient = $_POST['editclient'];
$query = "SELECT CONCAT(client_lname, ', ',client_fname) AS name FROM clients ASC WHERE client_lname='$editclient'";

[rawky1976]

Hello again, found the problem with the above; I named the submit button instead of the text field in the form!!! Sorry guys!

 

What can I put between these two lines to display the content of $query on the webpage? It's now dropping out of the if condition to display 'no results match etc...'

 

$result = @mysql_query ($query);

			if ($result) {

 

?

 

Thanks, Mark

[darkfreaks]

<?php
result = @mysql_query ($query);

			if ($result) { echo($result);}

[rawky1976]

thanks, seems to be the 'ASC' causing problems, removed that and I get results!