PHP - Dropdownbox Updating Database Field

Hi All,

Please can someone help me with this bit of code. I have a mysql database with a table called 'events'. I have six fields namely 'ID, mxitID, type, message, ts, publish'.
I am trying to update the field 'publish' from Yes --> No or if it is already No then back to Yes again. I have two files then main one beacon.php and publish.php
Here is the code:

beacon.php
Code: [Select]
<?php
        // connect to the database
        include('connect-db.php');

        // display data in table
//        echo "<p><b>View All</b> | <a href='view-paginated.php?page=1'>View by Page</a></p>";
//   echo "Select your Carousel: ";
   
   // get results from database
        $result = mysql_query("SELECT * FROM events WHERE type='beacon'")
                or die(mysql_error());

        echo "<table border='1' cellpadding='10'>";
   echo "<a href='index.php'>b Back</a><br><br>";
        echo "<tr> <th>ID</th> <th>mxitID</th> <th>Type</th> <th>Message</th> <th>Timestamp</th> <th>Published</th> <th>Modify</th></tr>";

        // loop through results of database query, displaying them in the table
        while($row = mysql_fetch_array( $result )) {
                
                // echo out the contents of each row into a table
                echo "<tr>";
                echo '<td>' . $row['ID'] . '</td>';
                echo '<td>' . $row['mxitID'] . '</td>';
                echo '<td>' . $row['type'] . '</td>';
      echo '<td>' . $row['message'] . '</td>';
      echo '<td>' . $row['ts'] . '</td>';
      echo '<td>' . $row['publish'] . '</td>';
                echo '<td><a href="publish.php?id=' . $row['ID'] . '"><input name="update" type="submit" id="update" value="Update"></a></td>';
                echo "</tr>"; 
        } 
        // close table>
        echo "</table>";
?>

publish.php
<?php

 // connect to the database
 include('connect-db.php');

 // get id value
 $id = $_GET['id'];
echo "$id";

 $sql="SELECT * FROM events WHERE type='beacon'";
$result=mysql_query($sql);


$active=($result['publish']=='')?'Yes':'No';
echo "$active";

if ($active='Yes') {
    $active='No';
 } else {
    $active='Yes';
}
$sql = "UPDATE events SET publish='$active' WHERE ID='$id'";
$result = mysql_query($sql);

// header("Location: beacon.php");
?>

I cant seem to change the value...any help would be much appreciated. Thank you in advance.

MOD EDIT: code tags added.

This topic has been moved to MySQL Help.

http://www.phpfreaks.com/forums/index.php?topic=351353.0

I have a form that allows my client to update some products. Now the products are simple just basic info and 1 picture.

I have set this up so they can edit the products and change the information, having done this many times in the past, but now hit a puzzling block that I am baffled.

The client when editing is presented with the form with the information pulled from the database and the form fields loaded with that data ready to edit.

The image can either be left alone or they can choose to upload a new image. They are shown the image they currently have stored in the database.

The problem I have is EVEN if they decide not to upload an image and change other information, when the submit the form it must be sending a blank value for the image somewhere as it is updating the database and removing the image reference as if it has been removed.

I have an if/else statement based on the form to perform 2 different queries for the update in mysql.

Here is the code for the form update, as you can see the image should not update?? Please help??


 if ($_SERVER['REQUEST_METHOD'] =='POST') {

//This stops SQL Injection in POST vars 
 foreach ($_POST as $key => $value) { 
  $_POST[$key] = mysql_real_escape_string($value); 
 }

// **************************** THIS IS FOR NO NEW IMAGE ********************************
 
 if ($_SERVER['REQUEST_METHOD'] =='POST' && empty($_FILES['product_image']['name'])) {

   # setup SQL statement for no new image
  $SQL = " UPDATE products SET product_title = '{$_POST['product_title']}', product_description = '{$_POST['product_description']}', standard_price = '{$_POST['standard_price']}', deluxe_price = '{$_POST['deluxe_price']}' WHERE product_id = '{$_REQUEST['product_id']}' ";
}

// **************************** THIS IS FOR A NEW IMAGE ********************************

 else {

// Check the image type is a jpeg or gif for the image.
 if (($_FILES['product_image']['type'] != "image/gif") && ($_FILES['product_image']['type'] != "image/jpeg") && ($_FILES['product_image']['type'] != "image/pjpeg")) {
  echo "<FONT FACE=\"Verdana\"><SPAN CLASS=\"content\">You have chosen not to upload a <b>Product Image</b>.<BR></SPAN>" ;
 } elseif ($_FILES['product_image']['size'] > 100000) {
  echo "<FONT FACE=\"Verdana\"><SPAN CLASS=\"content\">The file size is bigger than 300kb.<BR></SPAN>" ;
 } else {
  move_uploaded_file($_FILES['product_image']['tmp_name'], "/httpdocs/product_images/".$_FILES['product_image']['name']) ;
 echo "<FONT FACE=\"Verdana\"><SPAN CLASS=\"content\"><B>Your front image has successfully uploaded.</B><BR></SPAN>" ;
  }
}

  # setup SQL statement for update
  $SQL = " UPDATE products SET product_title = '{$_POST['product_title']}', product_description = '{$_POST['product_description']}', standard_price = '{$_POST['standard_price']}', deluxe_price = '{$_POST['deluxe_price']}', product_image = '{$_FILES['product_image']['name']}' WHERE product_id = '{$_REQUEST['product_id']}' ";
}
  
  #execute SQL statement
  $result = mysql_db_query( *****,"$SQL",$connection );

  # check for error
  if (!$result) { echo("ERROR: " . mysql_error() . "\n$SQL\n");    }

Hey,
Im needing some help with an update form that I have created using PHP/MySQL. Basically the form is working great (updating records, retrieving records and showing errors) but there is a problem with the errors.

If there are no errors and I edit the existing text input values, the database updates fine. However if I edit the existing text input values and there is an error, the edited input values dont save, they revert back to the values of the database.

I understand why this is happening, its because the text inputs are set to show the values of the database so if i edit the existing values and an error occurs or the page is refreshed, the values revert back to the database values. However id like it so that if any text in the text field have been edited and an error occurs, the text stays to how it is until the user by passes any errors and then the database is updated.

Hopefully this makes sense. I have attached the php page just incase anybody wants to look into it but any help would be much appreciated!

Also, im not looking for someone to just to fix this for me but if someone knows my problem and can guide me in the right direction, that would be great.

ok it updates the posts table , but not the notifications table , helP!
Code: [Select]
<?php include("../includes.php");
$session =$logOptions_id;
if($session)
{
$id = $_POST['id'];
if(!$id)
{
$id = $session;
}
$post = mysql_real_escape_string($_POST['post']);
$date = mktime();





$action_type = 0;



mysql_query("INSERT INTO posts SET to_id='$id',from_id='$session',post='$post',type='$action_type',date='$date'");
$post_id = mysql_insert_id();

$query = mysql_query("SELECT id,to_id,from_id,post,type,state,date FROM posts WHERE id='$post_id' AND state='0' ORDER BY id DESC LIMIT 15");
print posts($query, "newPost");

if($id!=$session)
{
mysql_query("INSERT INTO notifications SET user_id='$id', from_id='$session', post_id='$post_id', action_type='$action_type', date='$date'");
}

}
?>

do you see anything wrong with this update code?  i am having trouble setting the acntStatus=1.

Code: [Select]
<?php
mysql_select_db($database_uploader, $uploader);    
$query = "SELECT * FROM members WHERE uname='$_SESSION[user]'";
$result = mysql_query($query) or die(mysql_error());

if (mysql_num_rows($result) > 0) {
$row = mysql_fetch_array($result) or die(mysql_error());

$usedSpace = $row['bandwhitch'];

$acntType = $row['acntType'];
if ($acntType == 1) {
$totalSpace = 500;
}
else {
$totalSpace = 250;
}


if($usedSpace > $totalSpace) {
echo "There is something wrong with your account. Please contact us!";
$usageError = true;
mysql_query(sprintf("UPDATE members SET acntStatus='%s' WHERE uname='%d'",   
   mysql_real_escape_string(1),
$_SESSION['user']))
or die(mysql_error());  
mysql_close($con);
}
$usagePercent = (round(($usedSpace/$totalSpace), 2)) * 100; // Convert to percentage
}
?>

Hey

i have this code that should update database on submit of a form.

i have multiple rows selected from a database and i need to be able to update each row individually...however currently as the code stands it updates all rows with the data entered into the bottom row.

i dont know how to solve this its very frustrating

could someone take a look and help me?

here is the code

<?php
session_start();
?>
<a href="adminlogout.php">Logout</a><br />
<?php
$id = $_GET['id'];
if(!isset($_SESSION['myusername'])) {
header("location:adminlogin.php");
}
$dbhost = 'localhost';
$dbuser = 'root';
$dbpass = '';
$db = 'bank';

$conn = mysql_connect($dbhost,$dbuser,$dbpass);
mysql_select_db($db);
if(isset($_POST['submit'])){
$select = mysql_query("SELECT * FROM accounts WHERE cusid=$id");
$row3 = mysql_fetch_array($select);
$update = mysql_query("UPDATE accounts SET balance='".$_POST['balance']."', type='".$_POST['type']."', name='".$_POST['name']."', active='".$_POST['active']."' WHERE cusid=$id");
}
$result = mysql_query("SELECT * FROM customer WHERE cusid=$id");
$row2 = mysql_fetch_array($result);
echo $row2['name'] . "'s bank accounts" . "<br><br>";
$result2 = mysql_query("SELECT * FROM accounts WHERE cusid=$id");
echo "<form method='post' action='accounts.php?id=$id'>";
while($row = mysql_fetch_array($result2))
{
echo "<input type='text' name='accno' style='background-color:lightgrey;' readonly='readonly' value='$row[accno]'>" . "<input type='text' name='name' value='$row[name]'>"; if($row['type'] == "Current"){echo"<select name='type'>" . "<option selected='Selected'>Current</option>" . "<option>Savings</option>" . "</select>";} else{echo"<select name='type'>" . "<option selected='Selected'>Savings</option>" . "<option>Current</option>" . "</select>";} echo"<input type='text' name='balance' value='$row[balance]'>"; if($row['active'] == "No"){ echo "<select name='active'>" . "<option value='No' selected='selected'>No</option>" . "<option value='Yes'>Yes</option>" . "</select>";} elseif($row['active'] == "Yes"){echo "<select name='active'>" . "<option value='Yes' selected='selected'>Yes</option>" . "<option value='No'>No</option>" . "</select>";} echo "<input type='submit' name='submit' value='Update'>" . "<br>";
}
echo "</form>";
?>

Hello,
I have been staring at my screen for the last couple of days and have finally run out of solutions.

I have the code below where the data is generated form another page. The correct data is displayed but for some reason when I try to alter any data it does not work. I simply get the message, "Your profile has been successfully updated..." but nothing has been changed in the database.

I think the code is not connecting to the correct table in the database..  I fail to see why this would be.

Any help greatly appreciated.
Code: [Select]

<?php
  
error_reporting(E_ALL);
session_start();

  
  ?>


<?php
  
require_once('appvars.php');
  require_once('connectvars1.php');

  



 // Connect to the database
  
$dbc = mysqli_connect(DB_Host, DB_User, DB_Password, DB_Name);

  
if (!isset($_GET['user_id'])) {
    
$query = "SELECT * FROM antique WHERE user_id = '" . $_SESSION['user_id'] . "'";
  
  
}
  else 
{
    $query = "SELECT * FROM antique WHERE user_id = '" . $_GET['user_id'] . "'";
  
}
  $data = mysqli_query($dbc, $query);

  
if (mysqli_num_rows($data) == 1) {
    

  
$row = mysqli_fetch_array($data);
    

 }
?>



 




<?php

require_once('appvars.php');
  require_once('connectvars1.php');

  
// Make sure the user is logged in before going any further.
  
if (!isset($_SESSION['user_id'])) {
    echo '<p class="login">Please <a href="login1.php">log in</a> to access this page.</p>';
    
exit();
  
}
  


  // Connect to the database
  
$dbc = mysqli_connect(DB_Host, DB_User, DB_Password, DB_Name);


if (isset($_POST['submit'])) {
    

// Grab the profile data from the POST
    
$name = mysqli_real_escape_string($dbc, trim($_POST['name']));
    
$phone = mysqli_real_escape_string($dbc, trim($_POST['phone']));

$address1 = mysqli_real_escape_string($dbc, trim($_POST['address1']));
    
$address2 = mysqli_real_escape_string($dbc, trim($_POST['address2']));
    
$postcode = mysqli_real_escape_string($dbc, trim($_POST['postcode']));

$webadd = mysqli_real_escape_string($dbc, trim($_POST['webadd']));

$email = mysqli_real_escape_string($dbc, trim($_POST['email']));
    
$old_picture = mysqli_real_escape_string($dbc, trim($_POST['old_picture']));
    
$new_picture = mysqli_real_escape_string($dbc, trim($_FILES['new_picture']['name']));
    
$new_picture_type = $_FILES['new_picture']['type'];
    $new_picture_size = $_FILES['new_picture']['size']; 


$username = mysqli_real_escape_string($dbc, trim($_POST['username']));

$user_id = mysqli_real_escape_string($dbc, trim($_POST['user_id']));

    
if (!empty($_FILES['new_picture']['tmp_name'])) {list($new_picture_width, $new_picture_height) = getimagesize($_FILES['new_picture']['tmp_name']);

}




//list($new_picture_width, $new_picture_height) = getimagesize($_FILES['new_picture']['tmp_name']);
    
$error = false;

    

// Validate and move the uploaded picture file, if necessary
    
if (!empty($new_picture)) {
      if ((($new_picture_type == 'image/gif') || ($new_picture_type == 'image/jpeg') || ($new_picture_type == 'image/pjpeg') ||
        ($new_picture_type == 'image/png')) && ($new_picture_size > 0) && ($new_picture_size <= MM_MAXFILESIZE) &&
        ($new_picture_width <= MM_MAXIMGWIDTH) && ($new_picture_height <= MM_MAXIMGHEIGHT)) {
        if ($_FILES['new_picture']['error'] == 0) {
          

// Move the file to the target upload folder
          
$target = MM_UPLOADPATH . basename($new_picture);
          
if (move_uploaded_file($_FILES['new_picture']['tmp_name'], $target)) {
            

// The new picture file move was successful, now make sure any old picture is deleted
            
if (!empty($old_picture) && ($old_picture != $new_picture)) {
              
            }
          }
          else {
            

// The new picture file move failed, so delete the temporary file and set the error flag
            
@unlink($_FILES['new_picture']['tmp_name']);
            
$error = true;
            echo '<p class="error">Sorry, there was a problem uploading your picture.</p>';

          }
        }
      }
      
else {
        
// The new picture file is not valid, so delete the temporary file and set the error flag
        
@unlink($_FILES['new_picture']['tmp_name']);

        $error = true;
        
echo '<p class="error">Your picture must be a GIF, JPEG, or PNG image file no greater than ' . (MM_MAXFILESIZE / 1024) .
          ' KB and ' . MM_MAXIMGWIDTH . 'x' . MM_MAXIMGHEIGHT . ' pixels in size.</p>';
      }
    }



$error = false;


// Update the profile data in the database
    
if (!$error) {
      if (!empty($name)&& !empty($phone) && !empty($address1) && !empty($address2)) {
        // Only set the picture column if there is a new picture
        if (!empty($new_picture)) {

//if (!empty($postcode)){
          $query = "UPDATE antique SET name = '$name', phone = '$phone', address1 = '$address1', address2 = '$address2', postcode = '$postcode', " .
            " email = '$email', webadd = '$webadd', picture = '$new_picture', username = '$username' WHERE user_id = '" .  $row['user_id'] ."'";
        
}}
       
        else {
          
$query = "UPDATE antique SET name = '$name', phone = '$phone', address1 = '$address1', address2 = '$address2', postcode = '$postcode', " .
            " email = '$email', webadd = '$webadd', username = '$username' WHERE user_id = '" .  $row['user_id'] ."'";
        }
        mysqli_query($dbc, $query) or die("<br>Query $query<br>Failed with error: " . mysqli_error($dbc) . '<br>On line: ' . __LINE__); 

        

// Confirm success with the user
        
echo '<p>Your profile has been successfully updated. Would you like to <a href="viewprofile4.php">view your profile</a>?</p>';


        
mysqli_close($dbc);
        exit();
    
  }
      
else {
        echo '<p class="error">You must enter all of the profile data (the picture is optional).</p>';
   
   
    }
  } 

// End of check for form submission
  else {
    

// Grab the profile data from the database
    
$query="SELECT * FROM antique WHERE user_id= '" . $row['user_id'] . "'";

$data = mysqli_query($dbc, $query);
    
$row = mysqli_fetch_array($data);

    
if ($row != NULL) {
      $name = $row['name'];
      
$phone = $row['phone'];

$address1 = $row['address1'];

$address2 = $row['address2'];

$postcode = $row['postcode'];
      
$email = $row['email'];

$webadd = $row['webadd'];
      
$old_picture = $row['picture'];

$username = $_SESSION['username'];

$user_id = $row['user_id'];
    
}
    else {
      echo '<p class="error">There was a problem accessing your profile.</p>';

    }
  }


  mysqli_close($dbc);

?>

 
<form enctype="multipart/form-data" method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>">

    <input type="hidden" name="MAX_FILE_SIZE" value="<?php echo MM_MAXFILESIZE; ?>" />
   
<fieldset>
      <legend>Personal Information</legend>

      <label for="name">Name:</label>
      <input type="text" id="name" name="name" value="<?php if (!empty($name)) echo $name; ?>" /><br />

      <label for="phone">Phone:</label>
      <input type="text" id="phone" name="phone" value="<?php if (!empty($phone)) echo $phone; ?>" /><br />

<label for="address1">Address1:</label>
      <input type="text" id="address1" name="address1" value="<?php if (!empty($address1)) echo $address1; ?>" /><br />


      <label for="address2">Address2:</label>
      <input type="text" id="address2" name="address2" value="<?php if (!empty($address2)) echo $address2; ?>" /><br />

      <label for="postcode">Postcode:</label>
      <input type="text" id="postcode" name="postcode" value="<?php if (!empty($postcode)) echo $postcode; ?>" /><br />

      <label for="email">Email:</label>
      <input type="text" id="email" name="email" value="<?php if (!empty($email)) { echo $email; } else { echo 'No email entered';} ?>" /><br />

      <label for="webadd">Web address:</label>
      <input type="text" id="webadd" name="webadd" value="<?php if (!empty($webadd)) { echo $webadd; } else { echo 'No web entered';}  ?>" /><br />


<input type="hidden" name="old_picture" value="<?php if (!empty($old_picture)) echo $old_picture; ?>" />
      <label for="new_picture">Pictu </label>
      <input type="file" id="new_picture" name="new_picture" />
      <?php if (!empty($old_picture)) {
        echo '<img class="profile" src="' . MM_UPLOADPATH . $old_picture . '" alt="Profile Picture" style: height=100px;" />';
      } 

    ?> <br />
 <label for="address2">username:</label>
      <input type="text" id="username" name="username" value="<?php if (!empty($username)) echo $username; ?>" /><br />


<label for="user_id">User ID:</label>
      <input type="text" id="user_id" name="user_id" value="<?php echo '' . $row['user_id'] . '' ; ?>" /><br />
   
</fieldset>
   
<input type="submit" value="Save Profile" name="submit" />
 
</form>
<?php echo('<p class="login">You are logged in as ' . $_SESSION['username'] . '. <a href="logout3.php">Log out</a>.</p>');
echo '<class = "label">USER ID: ' . $row['user_id'] . '';

 ?>


<p><a href="index.php">Return to homepage</a></p>


<?php require_once('footer.php');
 ?>
</body>

</html>
 

Hi

I am trying my first OOP update.
I have it working exactly as I want except for one thing.

For some reason if I try to update the database with the same information (every column exactly the same)
it returns 0 affected rows.

is there anyway of getting the database to update, even if all columns are exactly the same?


Code:
Code: [Select]
$membershipID = Profile_membership::find_membership_ID($UID);
$MID = $membershipID->id;
$new_member = Profile_membership::make($MID, $UID, $acc_type, $membership, $upgradeL, $date, $dateUpgraded);
if($new_member && $new_member->save()){
$flag = 1;
}else{
$message .= "Error: Sorry, there was an error creating your membership. <br> Please try again<br>";
$flag = 0;
}


$new_member->save() will create the database entry if no ID exists, and will update if an ID does exist.

So, I want the save() to return success. If it does, move on else give an error.

However, I'm getting the error, if a user accidentally clicks submit, when no fields have been changed.
I what it to still update, so $flag will be 1


Thanks

i have this small problem trying to update the database....

what i have is a members site in which they can view a variety of topics, however i want the user to be able to say delete a topic they are not interested in but still keep that topic open to other users who have not blocked it

I'm tying to figure out how to do this, i initially had the following code:

$update_db = mysql_query("UPDATE topics SET view='2' WHERE topicID='$topicID'") or die(mysql_error());


I had it set to to 2 meaning that all the topics that were set to 1 were visible to the user, only those they blocked were set to 2 and only be blocked to those users who blocked them not everyone

The problem with that was that it blocked it to everyone

Can anyone help me?

so my database table already exists but i need to add new columns to the table so this is how the table looks now

CREATE TABLE IF NOT EXISTS `users` (
  `id` int(255) NOT NULL AUTO_INCREMENT,
  `birthday` varchar(10) COLLATE utf8_unicode_ci NOT NULL DEFAULT '1-1-1990',
  `comment_privacy` varchar(255) COLLATE utf8_unicode_ci NOT NULL DEFAULT 'everyone',
  `confirm_followers` int(11) NOT NULL DEFAULT '0',
  `current_city` text COLLATE utf8_unicode_ci NOT NULL,
  `follow_privacy` varchar(255) COLLATE utf8_unicode_ci NOT NULL DEFAULT 'everyone',
  `gender` varchar(6) COLLATE utf8_unicode_ci NOT NULL DEFAULT 'male',
  `hometown` text COLLATE utf8_unicode_ci NOT NULL,
  `message_privacy` varchar(255) COLLATE utf8_unicode_ci NOT NULL DEFAULT 'everyone',
  `post_privacy` varchar(255) COLLATE utf8_unicode_ci NOT NULL DEFAULT 'everyone',
  `timeline_post_privacy` varchar(255) COLLATE utf8_unicode_ci NOT NULL DEFAULT 'everyone',
  PRIMARY KEY (`id`),
  UNIQUE KEY `id` (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci AUTO_INCREMENT=1 ;

and this is what I need it to look.... but every time I insert in the sql to do the update but it does not do it as the table already there...

CREATE TABLE IF NOT EXISTS `users` (
  `id` int(11) NOT NULL AUTO_INCREMENT NOT NULL,
  `job_title` mediumtext COLLATE utf8_unicode_ci NOT NULL,
  `job_at` mediumtext COLLATE utf8_unicode_ci NOT NULL,
  `birthday` varchar(10) COLLATE utf8_unicode_ci NOT NULL DEFAULT '1-1-1990',
  `comment_privacy` varchar(255) COLLATE utf8_unicode_ci NOT NULL DEFAULT 'everyone',
  `confirm_followers` int(11) NOT NULL DEFAULT '0',
  `current_city` text COLLATE utf8_unicode_ci NOT NULL,
  `relationship` varchar(15) COLLATE utf8_unicode_ci  NOT NULL DEFAULT 'Not Applicable',
  `relationship_to` mediumtext COLLATE utf8_unicode_ci NOT NULL,
  `follow_privacy` varchar(255) COLLATE utf8_unicode_ci NOT NULL DEFAULT 'everyone',
  `gender` varchar(6) COLLATE utf8_unicode_ci NOT NULL DEFAULT 'male',
  `hometown` text COLLATE utf8_unicode_ci NOT NULL,
  `message_privacy` varchar(255) COLLATE utf8_unicode_ci NOT NULL DEFAULT 'everyone',
  `post_privacy` varchar(255) COLLATE utf8_unicode_ci NOT NULL DEFAULT 'everyone',
  `timeline_post_privacy` varchar(255) COLLATE utf8_unicode_ci NOT NULL DEFAULT 'everyone',
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci;

how can I do this update>? its ok i know how to do this.. but the code i sell needs this update but i cant get them to delete there table as there mybe data already in the table

Hi friends, the below code, which I've worked on quite a while,  creates  a dropdown, selects a record with a link to visit the url of that  record.   one ? can I update the table b4 closing?

--------------------------------------------------

below is code:

 <?php

include ('homedb-connect.php');

?>   

<!DOCTYPE><html><head>

<title>lookup menu</title>

</head>

<body><center><b>

<form name="form" method="post" action="">

 

<?php

//This creates the drop down box

echo "<select name= 'target'>";

echo '<option value="">' . '--- Select account ---' . '</option>';

$query = mysqli_query($conn, "SELECT target FROM infotbl");

  if ($query === false)

  { echo "Something went wrong<br />"; echo mysqli_error($conn); }

else { while ($row = mysqli_fetch_array($query))

  { echo "<option value='" . $row['target'] . "'>" . $row['target'] . '</option>'; }

  }

echo '</select>';

?>

<input type="submit" name="submit" value="Submit"/>

</form><center>

 

<?php

// ==============================================

if (isset($_REQUEST['target']))

 {

  $target = $_REQUEST['target'];

  // ===============================================

  $fetch  = "SELECT id, target, purpose, user, password, email, visits, lastused

FROM infotbl WHERE target = '" . mysqli_real_escape_string($conn, $target) . "'";

  // ===============================================================================

 

  $result = mysqli_query($conn, $fetch);

  if (!$result) { echo "Error:" . (mysqli_error($conn)); }

 

  //display the table

  echo '<table border="1"><tr><td bgcolor="cyan" align="center">lookup menu</td></tr>

<tr><td>

<table border="1">

<tr>

<td>id</td>  

<td bgcolor="#ccffff"> Target </td>

<td bgcolor="violet"> Purpose </td>

<td bgcolor="#ccffff"> User </td>

<td bgcolor="#ccffff">Password </td>

<td bgcolor="#ccffff"> Email </td>

<td bgcolor="#cyan"> Visits </td>

<td bgcolor="#cyan"> lastused</td>

</tr>';

 

  while ($data = mysqli_fetch_row($result))

  {

   

  // ==========================================================

  $url  = "http://$target";

  $link = '<a href="' . $url . '">' . $data[0] . '</a>';

  // ===========================================================

   

  echo ("<tr><td> $link </td><td>$data[1]</td><td>$data[2]</td><td>$data[3]</td>

<td>$data[4]</td><td>$data[5]</td><td>$data[6]</td><td>$data[7]</td></tr>");

  }

  echo '</table>

</td></tr></table>';

  }

?>

</body></html>

------------------------------------------------------

this is my update code:

<?php

$target = $_POST["target"];   

  $visits = 'visits';

  $Lastused = 'Lastused';   

  $sql = "UPDATE receiptno SET visits=visits+1, lastused=NOW() WHERE target=$target";

if ($conn->query($sql) === TRUE) { echo "Record updated successfully"; }

 else { echo "Error updating record: " . $conn->error; }

$conn->close();

?>

why does this code not update database.....any errors you see off the bat?  none of the messages are displaying for whether it posts or not......so I think there is something wrong with posting or a loop or something.

Code: [Select]
<?php
session_start();
include "config2.php";
if (!isset($_SESSION['id'])) { 
   echo 'Please <a href="login.php">log in</a> to access your account';
   exit(); 
}

//Connect to the database through our include 
include_once "connect_to_mysql.php";
// Place Session variable 'id' into local variable
$userid = $_SESSION['id'];
?>
 <?php
//action: view users -----------------------------------------------------------------------------
if (isset($_GET['viewUsers'])) {
//get all active users
$query = "SELECT name, username, phone, address, city, state, zip, cell, email, accounttype, badges, password, rank, userid FROM members WHERE userid=userid";
$rs = mysql_query($query);

?>
  <table width="563" border='1'>
    <tr>
      <th width="54">Name</th><th width="84">Username</th><th width="47">Email</th>
      <th width="148">Access Level</th>
      <th width="105">&nbsp;</th>
      <th width="85">&nbsp;</th>
      </tr>
    <?php
//show the users
while ($row = mysql_fetch_assoc($rs)) {
?>
    <tr>
      <td><?php echo $row['name'];?></td>
      <td><?php echo $row['username'];?></td>
      <td><?php echo $row['email'];?></td>
      <td><?php echo $row['accounttype']?></td>
      <td>&nbsp;</td>
      <td><a href='admin.php?edit&amp;id=<?php echo $row['userid'];?>'>Edit</a>, <a href='admin.php?delete&amp;id=<?php echo $row['userid'];?>'>Delete</a></td>
      </tr>
    <?php
}
?>
    </table>
  <?php
}
//action: edit user -----------------------------------------------------------------------------
if (isset($_GET['edit']) && isset($_GET['id'])) {
$userid = (int) $_GET['id'];
if ($userid == 0) {
die("Invalid ID provided.");
}
//execution when completed the edit user form and pressed submit button ---------------------
if (isset($_POST['editUser'])) {
//validate data ------------------------------------------------------------------------
//check empty fields
$notRequired = array("email","phone","address", "city", "state","zip","cell" ); //passwords won't be checked, as they are not required
foreach ($_POST as $k=>$v) {
if ($v == "" && !in_array($k,$notRequired)) {
$error[$k] = "<strong>This field is empty</strong>";
}
}
//escape string
$name = "mysql_real_escape_string{$_POST['fname']} {$_POST['last']}";
$phone = mysql_real_escape_string($_POST['phone']);
$address = mysql_real_escape_string($_POST['address']);
$city = mysql_real_escape_string($_POST['city']);
$state = mysql_real_escape_string($_POST['state']);
$zip = mysql_real_escape_string($_POST['zip']);
$email = mysql_real_escape_string($_POST['email']);
$cell = mysql_real_escape_string($_POST['cell']);
$username = mysql_real_escape_string($_POST['username']);
$last = mysql_real_escape_string($_POST['last']);
$first = mysql_real_escape_string($_POST['fname']);


//check email validation, the function is available at config.php

//check username exists in database
$res = mysql_query("SELECT username FROM members WHERE username='".$username."' AND username != '".$username."'");
if (mysql_num_rows($res) == 1) {
$error['username'] .= " <strong>Username already existst in database!</strong>";
}
//check both passwords are the same when password fields are not empty

//end validate data ---------------------------------------------------------------------

//save to database when no errors are detected ------------------------------------------
if (count($error) == 0) {
$query = "UPDATE members SET username='$username', email='$email', name='".$name."', phone='".$phone."',address='".$address."', city='".$city."',state='".$state."', zip='".$zip."',cell='".$cell."',badges='".$badges."', rank='".$rank."', first='".$first."', last='".$last."' WHERE userid='".$_GET['userid']."'";
$query1 = "UPDATE sessions SET username='".$username."', email='".$email."',name='".$name."', phone='".$phone."',address='".$address."', city='".$city."',state='".$state."', zip='".$zip."',cell='".$cell."',badges='".$badges."', rank='".$rank."' WHERE id='".$userid."'";




//update username session if you edit yourself
if ($userid == $_SESSION['auth_admin_userid']) {
$_SESSION['auth_admin_username'] = $username;
}

if (mysql_query($query)|| mysql_query($query1)) 
{
echo "<p><strong>User has been edited and saved to the database.</strong></p>";
} else {
echo "<strong>User has NOT been edited and saved into the database. ".mysql_error()."</strong>";
}
}
}
//get user from the database and put data into $_POST variables.
$rs = mysql_query("SELECT first, last, username, phone, address, city, state, zip, cell, email, badges, rank, accounttype FROM members WHERE userid = ".$userid."");
if (mysql_num_rows($rs) == 0) {
die("User does not exists!");
}
$row = mysql_fetch_assoc($rs);
$_POST['fname'] = $row['first'];

$_POST['last'] = $row['last'];
$_POST['username'] = $row['username'];
$_POST['phone'] = $row['phone'];
$_POST['address'] = $row['address'];
$_POST['city'] = $row['city'];
$_POST['state'] = $row['state'];
$_POST['zip'] = $row['zip'];
$_POST['cell'] = $row['cell'];
$_POST['email'] = $row['email'];
$_POST['badges'] = $row['badges'];
$_POST['rank'] = $row['rank'];
$_POST['accounttype'] = $row['accounttype'];


//if is admin, then $_POST['admin'] exists


?>
 
 
 
 
 
 
  <form action="admin.php?edit&amp;id=<?php echo $userid; ?>" method="post">
  <div id="TabbedPanels1" class="TabbedPanels">
  <ul class="TabbedPanelsTabGroup">
    <li class="TabbedPanelsTab" tabindex="0">My Info</li>
    <li class="TabbedPanelsTab" tabindex="0">Merit Badges</li>
    <li class="TabbedPanelsTab" tabindex="0">Scout Rank</li>
    </ul>
  <div class="TabbedPanelsContentGroup">
  <div class="TabbedPanelsContent">
 
    <table align="center" cellpadding="8" cellspacing="8">
      <tr> 
        <td><div align="right">First Name:</div></td>
        <td> <input type="text" name="name" value='<?php echo $_POST['fname'];?>' />
          <?php echo(isset($error['fname']))?$error['fname']:"";?></td>
        </tr> <tr> 
        <td><div align="right">Last Name:</div></td>
        <td> <input type="text" name="name" value='<?php echo $_POST['last'];?>' />
          <?php echo(isset($error['last']))?$error['last']:"";?></td>
        </tr>
      <tr>
        <td><div>Phone Number:</div></td>
        <td><input type="text" name="phone" value='<?php echo $_POST['phone'];?>' />
          <?php echo(isset($error['phone']))?$error['phone']:"";?></td>
        </tr> 
      <tr>
        <td><div align="right">Address:</div></td>
        <td><input type="text" name="address" value='<?php echo $_POST['address'];?>' />
          <?php echo(isset($error['address']))?$error['address']:"";?></td>
        </tr>
      <tr>
        <td><div align="right">City:</div></td>
        <td><input type="text" name="city" value='<?php echo $_POST['city'];?>' />
          <?php echo(isset($error['city']))?$error['city']:"";?></td>
        </tr>
      <tr>
        <td><div align="right">State:</div></td>
        <td><input type="text" name="state" value='<?php echo $_POST['state'];?>' />
          <?php echo(isset($error['state']))?$error['state']:"";?></td>
        </tr> 
      <tr>
        <td><div align="right">Zip Code:</div></td>
        <td><input type="text" name="zip" value='<?php echo $_POST['zip'];?>' />
          <?php echo(isset($error['zip']))?$error['zip']:"";?></td>
        </tr>
      <tr>
        <td><div align="right">Email:</div></td>
        <td>
         
            <input type="text" name="email" value='<?php echo $_POST['email'];?>' />
          <?php echo(isset($error['email']))?$error['email']:"";?></td>
        </tr>
      <tr>
        <td><div align="right">Cell Phone:</div></td>
        <td><input type="text" name="cell" value='<?php echo $_POST['cell'];?>' />
          <?php echo(isset($error['cell']))?$error['cell']:"";?></td>
        </tr> 
      <tr>
        <td class="aaaaaaa" align="right"><div>Username:</div></td>
        <td><label for="username"></label>
          <input type="text" name="username" value='<?php echo $_POST['username'];?>' />
          <?php echo(isset($error['username']))?$error['username']:"";?>
          </td>
        </tr>
      <input name="userid" type="hidden" value="<?php echo $userid; ?>" />
     
      </table>
    <p>&nbsp;       
   
   
    </div>
    <div class="TabbedPanelsContent">
      <label for="badges"></label>
      <input name="badges" type="text" id="badges" value='<?php echo $_POST['badges'];?>' />
      <?php echo(isset($error['badges']))?$error['badges']:"";?>
      </div>
    <div class="TabbedPanelsContent">
      <input name="rank" type="text" id="rank" value='<?php echo $_POST['rank'];?>' />
      <?php echo(isset($error['rank']))?$error['rank']:"";?>
      </div>
    </div>
  </div>
    <input name="editUser" type="submit" value="Save" />
   
   
    </form>   
  <p>
    <script type="text/javascript">
var TabbedPanels1 = new Spry.Widget.TabbedPanels("TabbedPanels1");
      </script>
    </p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <p>&nbsp;</p>
  <?php
}
?>
 

<br /><br />





</div></div>
<script type="text/javascript">
var MenuBar1 = new Spry.Widget.MenuBar("MenuBar1", {imgDown:"../SpryAssets/SpryMenuBarDownHover.gif", imgRight:"../SpryAssets/SpryMenuBarRightHover.gif"});
</script>

Hey guys,

I've been doing a little bit of exerementing with PDO's and it seems I can't get it to update the database... I don't know why...

Anyway here is the code:

index.php
Code: [Select]
<?php

/**
 * @author Jragon
 * @copyright 2011
 */

require_once('includes/include.php');

$user = new user();
$user->newUser('Jragon', 'blenders', $DBH);

echo '=D';

?>
/includes/connect.inc.php
Code: [Select]
<?php

/**
 * @author Jragon
 * @copyright 2011
 */


//Define connection details

//host
define('HOST', 'localhost');

//DataBase
define('DB', 'rankometer');

//Username
define('USER', 'root');

//Password
define('PASS', '');


?>

/includes/connect.php
Code: [Select]
<?php

/**
 * @author Jragon
 * @copyright 2011
 */

//Include connection crap
require_once('connect.inc.php');


//connect
try {
    //new PDO
    $DBH = new PDO("mysql:host=" . HOST . ";dbname=" . DB, USER, PASS);  
//check for errors
} catch(PDOException $e) {
    echo $e->getMessage();  
}  
?>

/classes/user.class.php
Code: [Select]
<?php

/**
 * @author Jragon
 * @copyright 2011
 */

class user{

    private $username;
    private $password;
    private $newPassword;
    private $salt;
    private $DBH;

    
    public function newUser($user, $pass, $DBH){
        //name varibles
        $this->password = $pass;
        $this->username = $user;
        $this->DBH = $DBH;
        
        $this->getSalt();
        $this->hashPass();
        $this->createUser();
        
    }
    
    private function getSalt(){
        //pick random number
        $a = rand(1, 100);
        $b = rand(1, 100);
        $this->salt = rand($a, $b) * 5;
    }
    
    private function hashPass(){
        //encrypt $this->password with md5 and a salt
        $plainPass = $this->password . $this->salt;
        $this->newPassword = md5($plainPass);
    }
    
    private function createUser(){
        //prepare statement
        $STH = $this->DBH->prepare("
        INSERT INTO `users` (
        `user` ,
        `pass` ,
        `salt`
        )
        VALUES (
        '$this->username', '$this->newPassword', '$this->salt'
        );
        ");  
        //execute statement
        $STH->execute();  
        
        //prepare statement
        $STH = $this->DBH->prepare("
        INSERT INTO `ranks` (
        `rank`
        )
        VALUES (
        
        );
        ");  
        //execute statement
        $STH->execute();  
        
    }
    
    
    
}

?>

SQL dump
Code: [Select]
-- phpMyAdmin SQL Dump
-- version 3.3.9
-- http://www.phpmyadmin.net
--
-- Host: localhost
-- Generation Time: Jun 02, 2011 at 06:05 PM
-- Server version: 5.5.8
-- PHP Version: 5.3.5

SET SQL_MODE="NO_AUTO_VALUE_ON_ZERO";

--
-- Database: `cakes`
--

-- --------------------------------------------------------

--
-- Table structure for table `cakes`
--

CREATE TABLE IF NOT EXISTS `cakes` (
  `UID` int(11) NOT NULL AUTO_INCREMENT,
  `cake` int(11) NOT NULL,
  PRIMARY KEY (`UID`)
) ENGINE=InnoDB DEFAULT CHARSET=latin1 AUTO_INCREMENT=1 ;

--
-- Dumping data for table `cakes`
--


-- --------------------------------------------------------

--
-- Table structure for table `users`
--

CREATE TABLE IF NOT EXISTS `users` (
  `UID` int(11) NOT NULL AUTO_INCREMENT,
  `userName` varchar(11) NOT NULL,
  `passWord` varchar(32) NOT NULL,
  `salt` int(11) NOT NULL,
  PRIMARY KEY (`UID`)
) ENGINE=InnoDB  DEFAULT CHARSET=latin1 AUTO_INCREMENT=2 ;

--
-- Dumping data for table `users`
--
I have no idea what is going wrong... I don't get an error. All the output I get is '=D'.

Thanks

-Jragon

Hey all, I've recently been coding a Bank for my game in which users can desposit there money into. But while coding it I've came though a few errors in which I carn't seem to sort


<?php
session_start();
include_once ("includes/functions.php");
include ("includes/config.php");
require ("crewtop.php");
logincheck();

ini_set ('display_errors', 1);
error_reporting (E_ALL);

$username = $_SESSION['username'];

$getuser = mysql_query("SELECT * FROM users WHERE username='$username'");

$user = mysql_fetch_object($getuser);

$themembers = mysql_query("SELECT * FROM users WHERE crew = '$user->crew'");

$ammoutmembers = mysql_num_rows($themembers);

$crew = mysql_query("SELECT * FROM crews WHERE name = '$user->crew'");

$crewstuff = mysql_fetch_object($crew);

// Got everything needed....

if ($_POST['desposit']){
$desposit = strip_tags($_POST['desposit']);
if ($desposit > $user->money){ // *** This Line ***

echo ("You haven't got that much Money to Desposit!");

}elseif ($desposit <= $user->money){

if  (ereg('[^0-9]',$desposit)){

echo ("Invalid Numbers Posted!");

}elseif(!ereg('[^0-9]',$desposit)){

mysql_query("UPDATE crews SET bank=bank+$desposit WHERE name='$user->crew'");

mysql_query("UPDATE users SET money=money-$desposit WHERE username='$username'");

echo ('You successfully Deposited &pound;".number_format($desposit)."!');

}

}
}

/* Deposit done - 

Now Withdraw... */

if ($_POST['withdraw']){
$withdraw = strip_tags($_POST['withdraw']);
if ($withdraw > $crewstuff->bank){ // *** This Line ***

echo ("You don't have that much Money in the Bank!");

}elseif ($withdraw <= $crewstuff->bank){

if  (ereg('[^0-9]',$withdraw)){

echo "Invalid Numbers Posted!";

}elseif(!ereg('[^0-9]',$withdraw)){

$leftinbank = $crewstuff->bank - $withdraw;

mysql_query("UPDATE crews SET bank=bank-$withdraw WHERE name='$user->crew'");

mysql_query("UPDATE users SET money=money+$withdraw WHERE username='$username'");

echo ('&pound;".number_format($withdraw)." has been Withdraw from the Crew Bank!');

}

}
}

// Withdraw done!
?>
<html>
<head>
<title>Crew Bank || SD</title>
<link rel="stylesheet" href="style.css" type="text/css">
</head>
<body class='body'>
<form action='' method='POST' name='crewbank'>
<?php

echo ("$username , $user->money");

?>
<?php

if ($username != $crewstuff->boss || $username != $crewstuff->coowner || $username != $crewstuff->underboss || $username == $crewstuff->recruiter || $username == $crewstuff->recruiterone || $crewstuff->boss == $username || $crewstuff->coowner == $username || $crewstuff->underboss == $username){
?>

<table width='50%' cellpadding='0' cellspacing='0' border='1' class='table' colspan='2' align='center'>

<tr>

<td class='header' align='center' colspan='2'>Crew Bank</td>

</tr>

<tr>

<td class='omg' colspan='2' align='center'>You Have <strong>&pound;<?php echo "".number_format($crewstuff->bank).""; ?></strong> in the Crew Bank!</td>

</tr>

<tr>

<td align='center' width='50%'>Deposit:</td><td align='center' width='50%'><input type='text' name='desposit' class='input' id='desposit'></td>

</tr>

<tr>

<td align='center' colspan='2' align='center'><input type='submit' name='desposit' class='button' id='despositmoney' Value='Deposit!'></td>

</tr>

<?php

} // Boss

?>

</table>

<br />

<?php

if ($crewstuff->boss == $username || $crewstuff->coowner == $username || $crewstuff->underboss == $username){

?>

<table width='50%' cellpadding='0' cellspacing='0' border='1' class='table' colspan='2' align='center'>

<tr>

<td class='header' align='center' colspan='2'>Crew Bank - Withdraw</td>

</tr>

<tr>

<td class='omg' align='center' colspan='2'>You carn't Withdraw more Money then there is in your Bank!</td>

</tr>

</tr>

<tr>

<td align='center' width='50%'>Withdraw:</td><td width='50%' align='center'><input type='text' name='withdraw' class='input' id='withdraw'></td>

</tr>

<tr>

<td align='center' colspan='2' align='center'><input type='submit' name='withdraw' class='button' id='withdrawmoney' Value='Withdraw!'></td>

</tr>

</table>

<?php

} // Boss .. Underboss

?>

</form>
</body>
</html>


The two lines with the Comments on " // *** This Line *** " are the parts I've got a problem with.

When a User is either despositing or Withdrawing there money it says there isn't enouth Money in the Bank, or that they don't have enouth Money, even when they have enouth.

Anyone see why its saying the Error?

Thanks in advance