PHP - String Search For Quotations ? \" ?

Hi there - can anyone lend me a little advise as to what I'm doing wrong here.

I have this line:
$query=mysql_query("SELECT * FROM gallery a JOIN gallery_image b ON a.id = b.gallery_id where gallery_id=$gallery_id");

I am trying to add an order by statement: order by gallery_image.priority

So I created:
$query=mysql_query("SELECT * FROM gallery a JOIN gallery_image b ON a.id = b.gallery_id where gallery_id=$gallery_id order by gallery_image.priority");

But, I receive the error (even though there is table called "Gallery Image" and a column called "Priority":
Code: [Select]
Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/***/public_html/***/gallery.php on line 5
select: Unknown column 'gallery_image.priority' in 'order clause'

Hello Everyone,

I am having issues where people are submitting null characters on my website (I.e. %00).  Currently, I check if their is a value by using the empty function, and I also am checking if the value after running the trim command is =="".  How can I check for these special characters to make sure that whatever they are submitting actually contains some sort of legitimate value?

Thanks!

Hi everyone!! I just started learning PHP two weeks ago and I hope someone can help me!!
I need to do a find and replace on a string, and each replace needs to have an unique id, and if that unique id exists in a table then return the value on the table. Make sense?

So like "find all the Xs in the string, replace with "X1, X2, X3...", then if "X3' exists on TableB, return value "X3 is on the table and has a value of Y3".

I actually got this to work already but it takes a long time to do it so I'm hoping someone could give me some advice on how to make it more EFFICIENT:



// PART ONE, find all "X" and replace with unique_id

for ($count = 1; $count <= strlen($string); $count++) // do this loop as many times as there are characters in $string
{
$unique_id = "replacement_" . $count; // give each replacement an unique id (replacement_1, replacement_2, replacement_3, etc..)
$string = preg_replace("X", $unique_id, $string , 1); // find X and replace it with the $unique_id in $string, and only do this ONCE
} 
$count_replacements = substr_count($string,"replacement_"); // count how many replacements occured in total


// PART TWO, find all unique_ids in tableB and echo the unique_id_value

for ($count = 1; $count <= $count_replacements; $count++) // do this loop as many times as there were replacements
{
$unique_id  = "replacement_" . $count; // set the unique_id of each replacement


$show_tableB = mysqli_query($link, 'SELECT * FROM tableB');      // select  the unique_ids and the unique_id_values in TableB
while ($row = mysqli_fetch_array($show_tableB)) { $tableBs[] = array('unique_id' => $row['unique_id'], 'unique_id_value' => $row['unique_id_value']);  }    

foreach($tableBs as $tableB): // for each entry in TableB, if the unique_id in TableB matches the unique_id of the replacement, return the unique_id_value
if ($tableB['unique_id'] == $unique_id) 
{ echo $unique_id . " is on TableB and it has a value of ". $tableB['unique_id_value'] }
endforeach;

}



The problem with this is: its not very efficient.
If $string has 500 charachters, it does the "PART ONE" 500 times. Then, say it found 300 Xs, it does "PART TWO" 300 more times. And every time it does "PART TWO", it checks all entries in TableB (which could be 200 or more).

So, that's it. Anyone has a better idea of how to do this??

Thanks!!!!

I have a script which queries a database and displays the relevant information.  However, to query the database I currently have to manually edit the URL.  Now I am trying to develop into a search form.

On the homepage I have a form which enters into "searchterm".    But I am but confused as to what I do with the "searchterm", can anyone advise how I can transfer the "searchterm" as the term which queries the database?

Code: [Select]
<input  type="text" name="searchterm" class="homepagesearch" > 

This is the code which queries and displays the query:

Code: [Select]


ini_set('display_errors', 1);
error_reporting(-1);


$query = "SELECT * FROM questions";

if(isset($_GET['question']))
{
/*query the database*/
$question = $_GET['question'];
$query .= " WHERE question like '%$question%' LIMIT 0, 10";
}

$result = mysql_query($query);

while($row = mysql_fetch_assoc($result))

{

$question = $row['question'];
$notes = $row['notes'];

echo "$question
$notes  </br>";
}

if ($_GET['question'] == $question ) {
echo 'Sorry, this product is not available.  Please visit our <a href="http://www.domain.co.uk">Homepage</a>.';
}

Can someone please help me with an array problem i can not figure out.

I need the array to be numbered from 1 to how ever many fields that are needed in the form and have a mysql field name and the title of the field also in the array.

1, "mysql_field_name", "Title of form field"
2, "", ""

and so on

then the form will be shown based on the array.

I have the following draft code which I am working with.

any suggestions on how i may do this array ?

Code: [Select]
<?php
$options = array(
'1'=> array('fieldtext'=>'option1', 'mysqlfield'=>'option1'),
'2'=> array('fieldtext'=>'option2', 'mysqlfield'=>'option2'),
'3'=> array('fieldtext'=>'option3', 'mysqlfield'=>'option3'),
'4'=> array('fieldtext'=>'option4', 'mysqlfield'=>'option4'),
);


// $options = array(1 => "option1", "option2", "option3", "option4");

// the line above works but i want to include the name of the mysql field as well.

$userid = 1;

?>
<div style="align: center; margin: 12px; font-family:Tahoma;">
<br><br><?php
if ($_POST['Update'] != "Update") { // check if form submitted yet, if not get data from mysql.
$res = db_query("SELECT * FROM `users` WHERE `userid` = '" . $userid . "'");
foreach($options as $key => $value) { $_POST[$key] = mysql_result($res, 0, $value); }
$ok_to_update = "no";
} elseif ($_POST['Update'] == "Update") { // check if form submitted yet, if so get POST data.
// error checking
// foreach($options as $key => $value) {
// $_POST[$i] = "";
// }
$ok_to_update = "yes";
}

if ($_POST['Update'] == "Update" && $ok_to_update == "yes") {
// $res = db_query("INSERT INTO `users` () VALUES ()"); // add user details to database.
?><p><br><br><br>Thank you for updating</p><?php
} else {
?><form name="form1" method="post" action="">
<?php foreach($options as $key => $value) {
?><p><?php echo($value); ?>:&nbsp;<input type="text" name="<?php echo($key); ?>" value="<?php echo($_POST[$key]);?>"></p>
<?php } ?>
<input name="Update" type="submit" value="Update">
</form>
<?php } ?>
</div>

What am i missing here why echo 0 == "some string" prints out 1?

What's the best way for putting actual quotations into a database?

I was using...

$quote = htmlspecialchars(mysqli_real_escape_string($dbc, $_POST['quote']));

Should I be?

Hello,

I get the following error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'BETWEEN '1800-01-01' AND '2200-01-01'' at line 1

Here is the code:

// building query

Code: [Select]
$where = array();

if ( $_GET['sex'] != '') {$where[] = " geslacht = '$sex'"; }

if( $_GET['minAge'] != '' && is_numeric($_GET['minAge'])){ $where[] = " geboortedatum < '$minAge'"; }

if( $_GET['maxAge'] != '' && is_numeric($_GET['maxAge'])) {$where[] = " geboortedatum >= '$maxAge'"; }

$where[] = " TijdRegistratie BETWEEN '$minDatum' AND '$maxDatum'";

// glueing query

$sql = "SELECT * FROM respondenten";
if (count($where) > 0){   $sql .= "WHERE ".implode(" AND ", $where);}
Can somebody tell me where i've put the wrong quotations? *confused*

This topic has been moved to PHP Regex.

http://www.phpfreaks.com/forums/index.php?topic=330098.0

i dont understand why the it gives me a syntax error when i type this:

Code: [Select]
echo '<h2> <?php echo $_POST['firstname'] ?> gelukt!</h2>';
Apparently, i have to do this:

Code: [Select]
echo '<h2> <?php echo $_POST["firstname"] ?> gelukt!</h2>';

Hello,

Im trying to have my search on my site so the URL goes to

index.php?page=search&string=WhatEverWasTyped

How is this possible?

Alright, so I have a textarea where users can put in text. Everytime they put [ani] and click submit, I want the output to change [ani] into an html code: <img src="mypic.gif">

Is this possible?

Hi There,

I am putting a form together that when submitted, pumps data in to an SQL DB. However I am having problems with quotation marks - for example, it's and her's and thier's cause an error, because the insert statement takes the quote as the end of the row.

How can PHP handle this so that it either removes, or replaces that quote?

Thanks
Matt

Hi, I am trying to search a string for a string of characters in this order ../ and carry out relevant if statements but it returns the same result every time. On echoing my $pos, $pos2, $pos3 and $pos4 variables the first two come back 0 and they are the strings that do contain ../ but the if statements perform the same? I don't understand, any ideas? Thanks...

Code: [Select]
<?php $logo = $info ['logo'];
$pos = strpos($logo, "../");//check if image contains ../
if ($pos == 0) {}
else {
$logo = substr($logo, 3);}

$image1 = $info ['image1'];
$pos1 = strpos($image1, "../");//check if image contains ../
if ($pos1 == 0) {}
else {
$image1 = substr($image1, 3);}

$image2 = $info ['image2'];
$pos2 = strpos($image2, "../");//check if image contains ../
if ($pos2 == 0) {}
else {
$image2 = substr($image2, 3);}

$image3 = $info ['image3'];
$pos3 = strpos($image3, "../"); //check if image contains ../
if ($pos3 == 0) {}
else {
$image3 = substr($image3, 3);}

?>

Somewhat new with PHP but I think I'm on the right track. I'm trying to search for a serial number on a sql table. I want a response of the serial # and what column its in. There is 4 columns if that helps (id, 30, 32, 31). (serials 002062008002220 002062008002222 002062008002233 are in the table) When I enter in a serial # 002062008002220 (all serials are 16 digits long). I get a blank page to show up...  my form

<form action="search.php" method="get">
<input id="serials" type="text" name="serials" />
<input type="submit" />
</form>

my php

<?php

$con=mysqli_connect("localhost", "xxx", "xxx", "nsmserials");

if (mysqli_connect_errno ()) {
echo "Failed to connect to MySQL: " . mysqli_connect_error();
}

$search = mysql_real_escape_string($_REQUEST['serials']);
$query = "SELECT 30, 32, 31 FROM nsmtable WHERE 30 LIKE '%$search%' OR 32 LIKE '%$search%' OR 31 LIKE '%$search%'";

$result = mysql_query($query);

while ($row = mysql_fetch_array($result)){
    echo "<li><span class='name'><b>{$row['serials']}</b></span></li>";
}

mysqli_close($con);

?>