PHP - If Spaces Occurs 4 Times Or More Within Exploded Quotes...

I have a form to search through apartments but if one field (rent) is not filled the php script cannot process the search. Is there a way that I can have the script just search the minimum rent or maximum rent if those fields are not filled in? In other words could I make it say if blank put in 0 for minimum rent?

The HTML Form:
Code: [Select]
<form method="post" action="searchapts.php">
    <table width="372" border="0" class="apttable">
      <tr>
    <td width="66" style="color: #000">Borough:</td>
    <td colspan="2"><select name="county" id="county">
      <option selected="selected">Bronx</option>
      <option>Brooklyn</option>
      <option>Manhattan</option>
      <option>Queens</option>
      <option>Staten Island</option>
      <option>---------------</option>
      <option>Nassau</option>
      <option>Suffolk</option>
    </select></td>
    </tr>
  <tr>
    <td style="color: #000">Beds:</td>
    <td colspan="2"><select name="type" id="type">
      <option>0 Bed</option>
      <option>1 Bed</option>
      <option>2 Bed</option>
      <option>3 Bed</option>
      <option>4 Bed</option>
      <option>5 Bed</option>
    </select></td>
    </tr>
  <tr>
    <td style="color: #000">Rent:</td>
    <td width="151" style="color: #000"><span id="AptRentMin">
      <span id="sprytextfield3">
      <input name="min_price" type="text" id="min_price" value="" size="7" maxlength="7" />
      <span class="textfieldRequiredMsg">Required.</span></span>(Min)</td>
    <td width="141" style="color: #000"><span id="AptRentMax">
      <span id="sprytextfield4">
      <input name="max_price" type="text" id="max_price" value="" size="7" maxlength="7" />
      <span class="textfieldRequiredMsg">Required.</span></span>(Max)</td>
    </tr>
  <tr>
    <td style="color: #000"><input name="Search" id="Search" value="Search" type="submit" /></td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
  </tr>
    </table>
    </form>


The PHP Script:
Code: [Select]
<?php

if ($_POST){

$county = $_POST['county'];
$rooms = $_POST['type'];
$rentmin = $_POST['rent_min'];
$rentmax = $_POST['rent_max'];
}

$dbase = mysql_connect ( 'localhost', '', '' );
mysql_select_db ( '', $dbase );

if($county){
$sql = "SELECT * FROM `apartments`, `county` = '".mysql_real_escape_string($county)."', `rooms` = '".mysql_real_escape_string($rooms)."', `MIN(rent)` '".mysql_real_escape_string($rentmin)."', `MAX(rent)`  '".mysql_real_escape_string($rentmax)."' order by `date_created` DESC";
}else{
$sql = "SELECT * FROM `apartments`";
}

$res = mysql_query($sql, $dbase);
if ( mysql_num_rows($res) > 0 )
{
echo "<strong>Click Headers to Sort</strong>";
echo "<table border='0' align='center' bgcolor='#999969' cellpadding='3' bordercolor='#000000' table class='sortable' table id='results'> 
<tr>
<th> Title </th> 
<th> Borough </th> 
<th> Town </th> 
<th> Phone </th> 
<th> Rooms </th> 
<th> Bath </th> 
<th> Fees </th>
<th> Rent </th>
</tr>";

while($row = mysql_fetch_assoc($res))
  {
echo "<tr>
<td bgcolor='#FFFFFF' style='color: #000' align='center'>
   <a href='classified/searchapts/index.php?id=".$row['id']."'>" . $row['title'] . "</a></td>
<td bgcolor='#FFFFFF' style='color: #000' align='center'>" . $row['county'] . "</td> 
<td bgcolor='#FFFFFF' style='color: #000' align='center'>" . $row['town'] . "</td> 
<td bgcolor='#FFFFFF' style='color: #000' align='center'>" . $row['phone'] . "</td> 
<td bgcolor='#FFFFFF' style='color: #000' align='center'>" . $row['rooms'] . "</td> 
<td bgcolor='#FFFFFF' style='color: #000' align='center'>" . $row['bath'] . "</td> 
<td bgcolor='#FFFFFF' style='color: #000' align='center'>" . $row['feeornofee'] . "</td> 
<td bgcolor='#FFFFFF' style='color: #000' align='center'>" . $row['rent'] . "</td>
</tr>"; 
}
echo "</table>";
print_r($apts);
}
else
{
echo "<p>&nbsp;</p><p>&nbsp;</p> No Results <br /><p>&nbsp;</p><FORM><INPUT TYPE='button' VALUE='Go Back' onClick='history.go(-1);return true;'></FORM> and Refine Your Search <p>&nbsp;</p><p>&nbsp;</p>";
}
?>

A problem has arisen which puzzles me. I have forms which save data to MySql and retrieve it, showing it as the default data in the form. Naturally I escape any quotes before sending it to the database and remove the slashes when I retrieve it. But the form HTML code shows the data like this value="$variable" which is fine when only single quotes are used in the data but causes a problem when the user uses double quotes. So data of John \"Jack\" Smith would be output as value="John "Jack" Smith" with obvious problems. If I use value='...' then that would cause problems with single quotes.

I haven't seen the answer in any of my books. The only things I can think of is changing all double quotes to single before saving to DB or converting them with htmlspecialcharacters so they are no longer actual quotes.

I need help here. I am creating a system where the user will be able to update the product stock by uploading the stock of the products according to the id that has been assigned to the product. 
this is how my products table in  looks like in mysql database

 

I tried the code below but all i could not update my data into my database. And there's not error shown on my code. I do not know what is wrong with my codes. Please help me.
below the code that i use for uploading the CSV file to the data of my product_stock. 

<?php 
include 'conn.php';
if(isset($_POST["add_stock"]))
{
 if($_FILES['product_file']['tmp_name'])
 {
  $filename = explode(".", $_FILES['product_file']['tmp_name']);
  if(end($filename) == "csv")
  {
   $handle = fopen($_FILES['product_file']['tmp_name'], "r");
   while($data = fgetcsv($handle))
   {
    $product_id = mysqli_real_escape_string($conn, $data[0]);
    $product_stock = mysqli_real_escape_string($conn, $data[1]);  
    $product_status = 1 ;
    $query = "UPDATE products SET `product_stock` = '$product_stock', `product_status` = '$product_status' WHERE id = '$product_id'";
    mysqli_query($conn, $query);
   }
   fclose($handle);
   header("location: upload-product.php?updation=1");
  }
  else
  {
   echo '<script>alert("An error occur while uploading product. Please try again.")
   window.location.href = "upload-product.php"</script>';
  }
 }
 else
 {
  echo '<script>alert("No file selected! ")
  window.location.href = "upload-product.php"</script>';
 }
}
if(isset($_GET["updation"]))
{
  echo '<script>alert("Product Stock Updated successfully!")</script>';
}
?>

 <div class="col-12">
            <div class="card card-user">
              <div class="card-header">
                <h5 class="card-title">Update Product Stock</h5>
                <div class="card-body">
                <div class="form-group">
				<label for="file">Update Products stock File (.csv file)</label>
                <a href="assets/templates/product-template.xlsx" title="Download Sample File (Fill In Information and Export As CSV File)" class="mx-2">
				<span class="iconify" data-icon="fa-solid:download" data-inline="false">
				</a>
                </div>
                <form class = "form" action="" method="post" name="uploadCsv" enctype="multipart/form-data">
                <div>
                <input type="file" name="product_file" accept=".csv">
                <div class="row">
                <div class="update ml-auto mr-auto">
                <button type="submit" class="btn btn-primary btn-round" name="add_stock"> Import .cvs file</button>
                </div>
                </div>
                </div>
                </div>
                </form>
                </div>
              </div>

This is the template that i require user to key in and saved it in CSV format before uploading it. 

Hello all,

I'm collecting date/time information via a form and would like to convert the info into something that I can stick in my MySql database (a timestamp???).  I'm collecting the current month (variable name: month-- of the form "mm"), day (variable name: day -- of the form "dd"), year (variable name: year -- of the form "yyyy"), time of day (variable name: time -- of the form "h:00"), and before or after noon (variable name: ampm -- of the form "am" or "pm").  Any suggestions as to how to change this into a quantity that I can store as a value and then use to compare to other date/times would be appreciated.

Thanks!

Code: [Select]
$teamLineUp=explode(";", $team['lineUp']);  #This is the team line up
foreach ($teamLineUp as $value) echo "<BR>".$value;

this works fine and outputs what I want EXCEPT if a word has a ' in it; for example the name O'Reilly gets broken into 2 values "O" and "Reilly"; is there a way around this?

Is there a way to send exploded data into a database without using multiple loops just to do so? My current code, but it only inserts the name value in the database as Array.

$chicken_names = mysql_real_escape_string($_POST['names']);

$chicken_names_exp = explode(' ', $_POST['names']);

foreach($chicken_names_exp as $value)

{

mysql_query("INSERT INTO names VALUES (null, '$chicken_names_exp"', '". $_POST['type'] ."')");

}

echo "Success! You have successfully sent in your chicken names! <a href='index.php'>Home</a>";

This is what I have now...im getting an undefined offset error, but $i should be set....unless my loop is a fail? I don't know...   


<form action="<?php echo $_SERVER['PHP_SELF']; ?>"method="post">
  <label>URLs delimited by a COMMA</label>
  <textarea name="urls"></textarea>
  <input name="submit" type="submit" value="Submit" />
</form>
<?php   
if (isset($_POST['submit'])) {
  $urls = trim($_POST['urls']); // remove white space from user input
  $arr = explode( ",", $urls);  // convert the input into an array
  $count = count($arr); // count the number of items in the array
  for ($i = 0; $i <= $count; $i++) { // setup the loop to stop iteration when $count is met
    echo '<pre><a href="' . $arr[$i] . '>' . $arr[$i] . '</a></pre>'; // Hopefully echo the link list back if all goes well...
  }
}
?>

Hey guys I'm having an issue trying to get my PHP to display the first url of my exploded string and non of the others. The SQL table column contains strings like this:

http://www.imgurl.com/image.jpg,http://www.imgurl.com/image2.jpg,http://www.imgurl.com/image3.jpg,http://www.imgurl.com/image4.jpg

I'm using the code below to on echo certain words based on their index/key value, this works fine however, im trying to only do this in exploded quotes... the problem is, exploding quotes turns the portion into an array which cant be passed to str_word_count... how can i do the same thing only inside quotes. So that  hello world "this is a test" would become: Code: [Select]
Hello World This [0] => Is [1] => a [2] => Test [3] 

Im trying to always remove say the 4th word in quotations, or maybe the 3rd and 4th, whatever i want to omit i leave out from the echo, so echo $data[0].' '.$data[3].'; would output "This Test" omitting "Is A"

Code: [Select]
$data = 'hello world "this is a test"';
$data = str_word_count($data, 1);
echo $data[1].' '.$data[2].' '.$data[0];

Hello,

Using the following code, I'm extracting the $current_solution from my database.  However, if the variable has quotes in it, I get gobbledegook.  Code: [Select]
<input type ="radio" name="solution" <?php  echo 'value="' . $current_solution . '"' ?> id="solution" <?php if ($row['solution'] == $current_solution) {echo 'checked = "yes"';} ?>/><?php echo$current_solution; ?></label>
As an example, if the $current_solution variable is:  A right-side up letter u   then I get:

" id="solution" checked = "yes"/>
A right-side up letter "u".

I know that it's a quote issue but am not sure how to fix it.  I tried adding slashes but I fear that it didn't work.  Any thoughts on this would be appreciated!

Thanks so much,

Eric

Hi, newbie here.
Could someone show me how to properly escape the quotes in this code so it works properly? I'm having major problems with it, thanks.

echo "<td style="background-color:#fff"
 onMouseover="this.style.backgroundColor='#ff9900';"
 onMouseout="this.style.backgroundColor='#fff';">"

If I put into the database this string: Call the wife's son tomorrow

How do I put it in to keep that apostrohe (wife's) and then when I retrieve it, also keep it without it displaying as wife/'s

If I use stripslashes I think that just gets rid of the slash, but I want to KEEP the slash (but still protecting the database so it is not seen as a quote by the php code).

I hope this is clear :-)

Hi...

I'm trying to get this code to work:
echo "<a href='". $row['img_path']."'><img border=0 src='". $row['thumb_bw_path']."' onmouseover='this.src='". $row['thumb_path']."'' onmouseout='this.src='". $row['thumb_bw_path']."'' />". "</a></td> \n";

To get the hover effect that i want there is alot of quotes. The hover effect does not work and i guess it is
because of the wrong use of quotes.
The correct way is:
Code: [Select]
onmouseover="this.src='source_to_image'"
But the use of double quotes " is not possible...
Is there a simple solution to this?

Alright, I've troubleshooted for about an hour on this and still can't figure it out, I've got the following line of code:

             Code: [Select]
$newstring = '$search = mysql_query("SELECT * FROM cmscbesalke.game where gameTitle = '".$gametitle."'");';
that is giving the following error:

Parse error: syntax error, unexpected '"' in /home/content/06/8675706/html/edit.game.php on line 136

I've tried to do the following as well:
Escaping the ", adding in extra . operators, and removing quotes.

The complicated part here is that I need the fwrite to write the $gametitle variable, with single quotes around it that way the mysql_query will return the correct database entry, but everytime I get the line of code to work it does not put the quotes.