PHP - Form Data Not Being Entered Into Mysql Database

I am having difficulty inserting the following codes values into my database. I know that the variables contain a value as I am displaying them on the output screen.


Code: [Select]
$link = mysql_connect($db_host,$db_user,$db_pass) or die('Unable to establish a DB connection');

mysql_select_db($db_database,$link);
mysql_query("SET names UTF8");
$usr = $userid;
$golfer = $_REQUEST['golfer'];
$tourney = $_REQUEST['tournament'];
$backup = $_REQUEST['backup'];
date_default_timezone_set('US/Eastern');
$time = date("Y-m-d H:i:s");
$t_id=1;



mysql_query("INSERT INTO weekly_picks (t_id, tournament, user, player, backup, timestamp) VALUES ('$t_id', '$tournament', '$usr', '$golfer', '$backup', '$time') or die('Error, insert query failed')");

echo $t_id; echo "<br />";
echo $tourney; echo "<br />";
echo $usr; echo "<br />";
echo $golfer; echo "<br />";
echo $backup; echo "<br />";
echo $time; echo "<br />";
echo $userdetail['email']; echo "<br />";

$to = $userdetail['email'];
$subject = "Weekly Tournament Pick for: $tourney";
$message = "This email is to confirm your pick for $tourney has been received.
Your pick is: $golfer.
Your backup pick is: $backup
The time it was submitted was $time
Do not reply to this email, the mailbox does not exist.
Contact me with any issues at xxxxxxx@xxxxxxx.com";

$from = "noreply@chubstersgcc.com";
$headers = "From:" . $from;
mail($to,$subject,$message,$headers);
?>

<div>
<p>This is to confirm that your pick has been submitted for the following tournament: <?php echo $tourney; ?>. A confirmation of your pick as also been emailed to you.</p>
<p>Your golfer: <?php echo $golfer; ?></p>
<p>Your backup: <?php echo $backup; ?></p>
<p>Your pick was submitted at: <?php echo $time; ?></p>
</div>

Hello

Im quite confused at what filtering I should use on my data when pulling it from a MySQL database.  I don't sanitize my data on input because I am using prepared statements with PHP's PDO Driver which means I don't need to use mysql_real_escape_string() at all.

When I pull the data to be displayed i.e. in a HTML Table I use the below function to make it safe for HTML output.


public static function htmlSafe($data)
{ return nl2br(htmlentities($data, ENT_QUOTES)); }


However the rules change when Im using a HTML Form to edit the data, and I am unsure what I need to strip out. I.e. What would I need to do to make all data safe to insert into the following form input.


<input id = "someInput" type = "text" value = "<?php echo $someVarThatNeedsFiltering ?>" />


Also, one more question, in my html attributes (Valid ones like class, name, id, style, _target) I use a mixture of double quotes(") and single quotes ('), for quoting my values. Which one should I use or which one is more valid, doubles, or singles?

I'm building a php program that registers users onto a website. With the help of people from this thread http://www.phpfreaks.com/forums/index.php?topic=332260.15
I was able to accomplish the goal and now the signup works with conditions that check for a valid email, and if the password is strong enough.

T he program correctly displays the the problem when a user does NOT enter a valid email, or a strong enough password, but the user has to re-enter the email and password everytime.

I want to make it so that the fields remained populated with what the user entered previously, so he or she does not have to re-enter his or her email/password.

Here is the code (its really ghetto)

Code: [Select]
<?php

function check_email_address($email) {
    // First, we check that there's one @ symbol, and that the lengths are right
    if (!ereg("^[^@]{1,64}@[^@]{1,255}$", $email)) {
        // Email invalid because wrong number of characters in one section, or wrong number of @ symbols.
        return false;
    }
    // Split it into sections to make life easier
    $email_array = explode("@", $email);
    $local_array = explode(".", $email_array[0]);
    for ($i = 0; $i < sizeof($local_array); $i++) {
         if (!ereg("^(([A-Za-z0-9!#$%&'*+/=?^_`{|}~-][A-Za-z0-9!#$%&'*+/=?^_`{|}~\.-]{0,63})|(\"[^(\\|\")]{0,62}\"))$", $local_array[$i])) {
            return false;
        }
    }    
    if (!ereg("^\[?[0-9\.]+\]?$", $email_array[1])) { // Check if domain is IP. If not, it should be valid domain name
        $domain_array = explode(".", $email_array[1]);
        if (sizeof($domain_array) < 2) {
                return false; // Not enough parts to domain
        }
        for ($i = 0; $i < sizeof($domain_array); $i++) {
            if (!ereg("^(([A-Za-z0-9][A-Za-z0-9-]{0,61}[A-Za-z0-9])|([A-Za-z0-9]+))$", $domain_array[$i])) {
                return false;
            }
        }
    }
    return true;
}

define('DB_NAME', 'catch');
define('DB_USER', 'username');
define('DB_PASS', 'password');
define('DB_HOST', 'page.sqlserver.com');

// contact to database
$connect = mysql_connect(DB_HOST, DB_USER, DB_PASS) or die('Error , check your server connection.');
mysql_select_db(DB_NAME);
  
//Get data in local variable
$v_name=$_POST['name'];
$v_email=$_POST['email'];
$v_msg=$_POST['msg'];


 if ( check_email_address($_POST['name'])  == false) 
 
 
 {
   $query = "INSERT INTO contact(name,email,msg) VALUES ('$v_name','$v_email','$v_msg')";
$result = mysql_query( $query );

if( !$result ) {
die( mysql_error() );
}
echo <<<EOD
<head>      
<link rel="stylesheet" type="text/css" href="http://hedgezoo.com/signup.css">
</head>
<h2>Free Registration</h2>
<form action="contact_insert2.php" method="POST" id="insert">
<table>
<tr>
<td>Email</td>
<td ><input type="text" size="40" name="name"></td>
</tr>
    <tr>
<td>Password</td>
<td><input type="password" size="40"  name="msg" ></td>
</tr>
<tr>
<td colspan=2 id="sub">
You must enter a valid email. <br />
<input type="submit" name="submit" value="submit">
</td>
</tr>
</Table>
</form>
EOD;
}

if( $v_name == "" || $v_msg == "" )
// if name is empty or if pass is empty
{
$query = "INSERT INTO contact(name,email,msg) VALUES ('$v_name','$v_email','$v_msg')";
$result = mysql_query( $query );

if( !$result ) {
die( mysql_error() );
}

echo <<<EOD
<head>      
<link rel="stylesheet" type="text/css" href="http://hedgezoo.com/signup.css">
</head>
<h2>Free Registration</h2>
<form action="contact_insert2.php" method="POST" id="insert">
<table>
<tr>
<td>Email</td>
<td ><input type="text" size="40" name="name"></td>
</tr>
    <tr>
<td>Password</td>
<td><input type="password" size="40"  name="msg" ></td>
</tr>
<tr>
<td colspan=2 id="sub">
You must enter an email and password. <br />
<input type="submit" name="submit" value="submit">
</td>
</tr>
</Table>
</form>
EOD;
}

if( strcspn( $_REQUEST['msg'], '0123456789' ) == strlen( $_REQUEST['msg'] ) )
// the above statement says if pass does not contain a number
{
$query = "INSERT INTO contact(name,email,msg) VALUES ('$v_name','$v_email','$v_msg')";
$result = mysql_query( $query );

if( !$result ) {
die( mysql_error() );
}
echo <<<EOD
<head>      
<link rel="stylesheet" type="text/css" href="http://hedgezoo.com/signup.css">
</head>
<h2>Free Registration</h2>
<form action="contact_insert2.php" method="POST" id="insert">
<table>
<tr>
<td>Email</td>
<td ><input type="text" size="40" name="name"></td>
</tr>
    <tr>
<td>Password</td>
<td><input type="password" size="40"  name="msg" ></td>
</tr>
<tr>
<td colspan=2 id="sub">
<div style="color:red;">Your password must contain a number.</div> <br />
<input type="submit" name="submit" value="submit">
</td>
</tr>
</Table>
</form>
EOD;
}


if( strlen($_POST['msg']) < 8 )
// the above statement says if pass is not 8 characters long
{
$query = "INSERT INTO contact(name,email,msg) VALUES ('$v_name','$v_email','$v_msg')";
$result = mysql_query( $query );

if( !$result ) {
die( mysql_error() );
}
echo <<<EOD
<head>      
<link rel="stylesheet" type="text/css" href="http://hedgezoo.com/signup.css">
</head>
<h2>Free Registration</h2>
<form action="contact_insert2.php" method="POST" id="insert">
<table>
<tr>
<td>Email</td>
<td ><input type="text" size="40" name="name"></td>
</tr>
    <tr>
<td>Password</td>
<td><input type="password" size="40"  name="msg" ></td>
</tr>
<tr>
<td colspan=2 id="sub">
<div style="color:red;">Your password must be at least 8 characters long.</div> <br />
<input type="submit" name="submit" value="submit">
</td>
</tr>
</Table>
</form>
EOD;
}


if ( $_POST['msg'] == strtolower($_POST['msg']) )
// the above statement says if pass is all lowercase
{
$query = "INSERT INTO contact(name,email,msg) VALUES ('$v_name','$v_email','$v_msg')";
$result = mysql_query( $query );

if( !$result ) {
die( mysql_error() );
}
echo <<<EOD
<head>      
<link rel="stylesheet" type="text/css" href="http://hedgezoo.com/signup.css">
</head>
<h2>Free Registration</h2>
<form action="contact_insert2.php" method="POST" id="insert">
<table>
<tr>
<td>Email</td>
<td ><input type="text" size="40" name="name"></td>
</tr>
    <tr>
<td>Password</td>
<td><input type="password" size="40"  name="msg" ></td>
</tr>
<tr>
<td colspan=2 id="sub">
<div style="color:red;">Your password must have at least one capital letter.</div> <br />
<input type="submit" name="submit" value="submit">
</td>
</tr>
</Table>
</form>
EOD;
}

if ( preg_replace("/[^a-zA-Z0-9\s]/", "", $_POST['msg']) == $_POST['msg'] )
// the above statement says if pass contains no special characters
{
$query = "INSERT INTO contact(name,email,msg) VALUES ('$v_name','$v_email','$v_msg')";
$result = mysql_query( $query );

if( !$result ) {
die( mysql_error() );
}
echo <<<EOD
<head>      
<link rel="stylesheet" type="text/css" href="http://hedgezoo.com/signup.css">
</head>
<h2>Free Registration</h2>
<form action="contact_insert2.php" method="POST" id="insert">
<table>
<tr>
<td>Email</td>
<td ><input type="text" size="40" name="name"></td>
</tr>
    <tr>
<td>Password</td>
<td><input type="password" size="40"  name="msg" ></td>
</tr>
<tr>
<td colspan=2 id="sub">
<div style="color:red;">Your password must have at least one special character.</div> <br />
<input type="submit" name="submit" value="submit">
</td>
</tr>
</Table>
</form>
EOD;
}
else 
echo <<<EOD
<B>GO FUCK YOURSELF</B>
EOD;
 ?>

Hello to all,

I have problem figuring out how to properly display data fetched from MySQL database in a HTML table.

In the below example I am using two while loops, where the second one is nested inside first one, that check two different expressions fetching data from tables found in a MySQL database. The second expression compares the two tables IDs and after their match it displays the email of the account holder in each column in the HTML table.

The main problem is that the 'email' row is displayed properly while its while expression is not nested and alone(meaning the other data is omitted or commented out), but either nested or neighbored to the first while loop, it is displayed horizontally and the other data ('validity', 'valid_from', 'valid_to') is not displayed.'

Can someone help me on this, I guess the problem lies in the while loop?
Here is part of the HTML code:

<thead>
 <tr>
 <th data-column-id="id" data-type="numeric">ID</th>
 <th data-column-id="email">Subscriber's Email</th>
 <th data-column-id="validity">Validity</th>
<th data-column-id="valid_from">Valid From</th>
 <th data-column-id="valid_to">Valid To</th>
</tr>
</thead>

Here is part of the PHP code:

 

    <?php
    while($row = $stmt->fetch(PDO::FETCH_ASSOC))
    {
        echo '
            <tr>
                <td>'.$row["id"].'</td>
        ';
        while ($row1 = $stmt1->fetch(PDO::FETCH_ASSOC)) {
        echo '
                <td>'.$row1["email"].'</td>
        ';
        }
        if($row["validity"] == 1) {
            echo '<td>'.$row["validity"].' month</td>';
        }else{
            echo '<td>'.$row["validity"].' months</td>';
        }
        echo '  <td>'.$row["valid_from"].'</td>
                <td>'.$row["valid_to"].'</td>
        </tr>';
    }
    ?>

P.S. Please know that I have purposely omitted the connection part and the methods in the class that are used in this code to keep the spot of the problem as clean as possible. If you need me to rephrase the question, please ask.

Thank you.

hi guys, im new to this forum

I'm new also to php, I need help from you guys:

I want to display personal information from a certain person (the data is on the mysql database) using his name as a link:

example:
               (index.php)
               names
                          1. Bill Gates
                          2. Mr. nice Guy
           
i want to click Bill Gates
 
   (output.php)
     Name: Bill Gates
     Country:xxxx
     Age: xx   
                 etc.

How can i make this or how to learn this?
   
                 

             
               

   
       

Hello, I'm new to this forum and I need some help. I'm creating a simple database that it submits data from a user input. Unfortunatly, it's not sending any data to mysql also the form is not validating each field.

Code: [Select]
<?php

if (isset($_POST['submitted'])){

$fields = array(
'email',
'state',
'district',
'gender',
'age',
'profession',
'survey',
);

foreach($fields as $fieldName) {
if(isset($_POST[$fieldName]) and trim($_POST[$fieldName]) !==''){
$fieldName = trim($_POST[$fieldName]);
}else {

$errors[] = "Please enter your". $fieldName .""; //code to validate fields
}
}
if(isset($errors)){

require_once('Connections/encourage.php');

$query = "INSERT INTO participants (email, state, district, gender, age, profession, survey) 
VALUES ('$email', '$state', '$district', '$gender', '$age', '$profession','$survey')"; //databasse connection
   
$result = mysql_query ($query); 

if ($result){

echo '<h1 id="mainhead">Thanks for submitting</hl>
<p>You are now registered</p>';
exit();

}else{

echo '<h1 id="mainhead">System Error</hl>
<p>Your registration could not be completed due to a system error We apologize for any incovience</p>';//gives system error
echo 'p' . mysql_error(). '<br /><br />Query: ' . $query . '</p>';
exit();

}
mysql_close();

} else { 

echo '<h1 id="mainhead">Error!</h1>
<p class="error">The following error(s) occurred:<br />';
foreach($errors as $msg) {
echo " - $msg<br/>\n";
}
echo '</p><p>Please try again.</p><p><br/></p>';
}

}
?>
  <form id="form1" name="form1" method="post" action"registration.php">
  <fieldset class="first">
  <label class="lableone" for="email">Email:* </label>
  <input name="email" value="<?php if(isset($_POST['email'])) echo $_POST['name'];?>"/>
 
  <label for="state"/>State:* </label>
  <input name="state" value="<?php if(isset($_POST['state'])) echo $_POST['state'];?>"/>
 
  <label for="schooldistrict"/>School District:* </label>
  <input name="schooldistrict" value="<?php if(isset($_POST['district'])) echo $_POST['district'];?>" />
 
  <label for="gender">Gender:* </label>
 <select name="gender">
   <option>Choose Your Gender</option>
   <option value="male" <?php echo ($form['gender'] == 'male' ? ' selected' : ''); ?>>Male</option>
   <option value="female"<?php echo ($form['gender'] == 'female' ? ' selected' : ''); ?>>Female</option>
 </select>
 
    <label for="age"/>Your Age:* </label>
  <input name="age" type="text" class="age" maxlength="2" value="<?php if(isset($_POST['age'])) echo $_POST['age'];?>"  />
 
  <label for="profession"/>Profession:* </label>
  <input name="profession" value="<?php if(isset($_POST['age'])) echo $_POST['age'];?>" />
 
  <label for="surveys"/>Willingness to participate in future surveys: </label>
  <input name="surveys" type="checkbox" id="surveys" value="yes" <?php echo ($form['survey'] == 'yes' ? 'checked' : '');?>/>
 
  </fieldset>
<fieldset>
  <input class="btn" name="submit" type="submit" value="Submit" />
<input class="btn" name="reset" type="reset" value="Clear Form" />
<input type="hidden" name="submitted" value="TRUE" />
</fieldset>

  </form>


Can someone help me out? Thanks in advanced! 

Hi,

I'm having trouble adding data to the database (test) that i created. I just can't see where I'm going wrong. need some other peoples opinions.

I have tried taking the id out of the SQL statement completely as it is an auto increment, but that doesn't seem to work either.

Thanks in advance...


<?php

$fname = $_POST['fname'];
$sname = $_POST['sname'];
$email = $_POST['email'];
$pword = $_POST['password'];
$gender = $_POST['gender'];
   
$user_name = "root";
$password = "";
$database = "test";
$server = "127.0.0.1";

$db_handle = mysql_connect($server, $user_name, $password);

$db_found = mysql_select_db($database, $db_handle);

if ($db_found)
{
$SQL = "INSERT INTO members (id, fname, sname, email, password, gender) VALUES (NULL, $fname, $sname, $email, $pword, $gender);";
$result = mysql_query($SQL);

mysql_close($db_handle);

print "Thanks for joining us ".$fname.".";
print "<br /><br />";
print $fname . "<br />";
print $sname . "<br />";
print $email . "<br />";
print $pword . "<br />";
print $gender . "<br />";
}
else
{
print "Database NOT Found";
mysql_close($db_handle);
}

?>

I need to display the last 30 days entries from database in PHP and here is the code that i am currently using, but its not working.

While entering the data in database, the date format that i am using is this...
Code: [Select]
$subon = date("F j, Y, g:i a");
And to display the code i am using this query...
Code: [Select]
$start_date = date("F j, Y, g:i a", strtotime('-30 days'));
$curr_date = date("F j, Y, g:i a");
$sql = "SELECT * FROM table WHERE status = 'approved' AND subon BETWEEN '$start_date' AND '$curr_date' ORDER BY ID DESC LIMIT 0, 5";
And then i am using the usual stuff to display the data but its not working.

Somebody please help me... Thanks in advance.

hello friends,
actually i am trying to insert data in mysql
database.
here is my code

<?php
	include_once("../includes/database.php");
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Insert Product</title>
</head>

<body>
	<form action="insert_product.php" method="post" enctype="multipart/form-data">
    	<table align="center" width="600">
        <tr align="center">
        	<td colspan="8"><h2> Insert New Post</h2></td>
        </tr>
        <tr>
        	<td align="right"><b>Product Title :</b></td>
            <td><input type="text" name="product_title"  size="50" style="background-color:#06C; color:#FFF"  /></td>
        </tr>
         <tr>
        	<td align="right"><b>Product Category :</b></td>
            <td>
            	<select name="product_cat" style="background-color:#06C; color:#FFF" >
                	<option>Select A Category </option>
                    <?php 
						$get_cats = "SELECT * FROM categories";	
						$run_cats = mysqli_query($con, $get_cats);
						while($row_cats = mysqli_fetch_array($run_cats)){
							$cat_id = $row_cats['cat_id'];
							$cat_title = $row_cats['cat_title'];
							echo "<option value='$cat_id'>$cat_title</option>";
						}
					?>
                </select>
            </td>
        </tr>
         <tr>
        	<td align="right"><b>Product Platform :</b></td>
            <td>
            	<select name="product_brand" style="background-color:#06C; color:#FFF" >
                	<option>Select A Platform </option>
                    <?php 
						$get_brands = "SELECT * FROM brands";	
						$run_brands = mysqli_query($con, $get_brands);
						while($row_brands = mysqli_fetch_array($run_brands)){
							$brand_id = $row_brands['brand_id'];
							$brand_title = $row_brands['brand_title'];
							echo "<option value='$brand_id'>$brand_title</option>";
						}
					?>
                </select>
            </td>
        </tr>
         <tr>
        	<td align="right"><b>Product Image :</b></td>
            <td><input type="file" name="product_image"  /></td>
        </tr>
         <tr>
        	<td align="right"><b>Product Price :</b></td>
            <td><input type="text" name="product_price" style="background-color:#06C; color:#FFF"  /></td>
        </tr>
         <tr>
        	<td align="right" valign="top"><b>Product Description :</b></td>
            <td><textarea name="product_desc" cols="50" rows="10" style="background-color:#06C; color:#FFF"  ></textarea></td>
        </tr>
         <tr>
        	<td align="right"><b>Product Keywords :</b></td>
            <td><input type="text" name="product_keywords" size="50" style="background-color:#06C; color:#FFF" /></td>
        </tr>
         <tr align="center">
            <td colspan="8"><input type="submit" name="insert_post" value="Submit Now" /></td>
        </tr>
        </table>
    </form>
</body>
</html>

<?php
	if(isset($_POST['insert_post'])){
		$product_title = $_POST['product_title'];
		$product_cat = $_POST['product_cat'];
		$product_brand = $_POST['product_brand'];
		$product_price = $_POST['product_price'];
		$product_desc = $_POST['product_desc'];
		$product_keywords = $_POST['product_keywords'];
		$product_image = $_FILES['product_image']['name'];
		$product_image_tmp = $_FILES['product_image']['tmp_name'];
		move_uploaded_file($product_image_tmp,"product_image/$product_image");
		
		$sql = "INSERT INTO products (product_cat,product_brand,product_title,product_price,product_desc,product_image,product_keywords) VALUES ('$product_cat','$product_brand','$product_title','$product_price','$product_desc','$product_image','$product_keywords')";
		$query = mysqli_query($con, $sql);
		if($query){
			echo "<script>alert('Product Has Been Inserted')</script>";	
			echo "<script>windoow.open('insert_product.php','_self')</script>";
			exit();
		}else{
			echo "<script>alert('errror')</script>";	
		}
	}
?> 
 

but somehow its not inserting
data into my table can somebody tell wherre
m i doing mistake.

the categories and brands are displaying from database. But its not inserting data

here is my database script.

 <?php
 $con = mysqli_connect("localhost","root","","sg");
?>    

I am trying to display data from mysql. Each row from the mysql database shows up under rows.

I want the rows of data from mysql  to appear in colums of 4.

can some one help please.

<?php
$sql = 'SELECT * FROM dbtable ORDER BY id';
$result = $db->query($sql);
$output[] = '<ul>';
while ($row = $result->fetch()) {
      $output[] = '<table>';
         $output[] = '<tr>';
         $output[] = '<td class="style10"><strong>'.$row['item'].'</strong></td>';
         $output[] = '</tr>';
         $output[] = '<tr>';
         $output[] = '<td><img src="images/'.$row['pic'].'" width="100" height="150" /></td>';
         $output[] = '</tr>';
         $output[] = '<tr>';
         $output[] = '<td>'.$row['description'].'</td>';
         $output[] = '</tr>';
      $output[] = '</table>';
}
echo join('',$output);
?>

Ugh. Ive been asking so many questions, betcha already know my name. Hahah.
Anyways, I know I already asked a question like this, but this is different.
One of the values I am trying to insert into a database is simply not working.
Here is the columnes in my mysql database:

c_id   commet       story   user      date_added   star
Every value but 'commet' is getting inserted into database.  NO error, no mysql errror. I have racked my brain trying to figure out what is wrong with the script.
Here is my code:
Code: [Select]
<?php
$idget = $_GET['id'];
mysqlConnect();
//submit story
if(isset($_POST['submit']))
{
   $com_form = mysql_real_escape_string(bb($_POST['commet']));
   $rat_form = $_POST['rat'];
   $story_form =  $idget;
   $user = $_SESSION['user'];
   $date = date("Y-m-d");
   $query1 = "
   INSERT INTO story_commets(star, story, user, date_added, commet)
   VALUES($rat_form, '$story_form', '$user', '$date', '$com_form')
   ";
   mysql_query($query1) or die(mysql_error());


      
      
   //}
}

// desplay reviews


$query3 = "
SELECT * FROM story_commets
WHERE story = '$idget'
ORDER BY date_added
";
$select3 = mysql_query($query3) or die(mysql_error());
//$x=1;
$ratav = array();
//if(mysql_num_rows($select3) == 0)
//{
   echo '<div id="message"> No Reviews Yet.... <>';
   
//}
//else
//{
while($rows3 = mysql_fetch_assoc($select3))
{
   
   
   $commetdb = $rows3['commet'];
   $user_com_db = $rows3['user'];
   $datedb = $rows3['date_added'];
   $stardb = $rows3['star'];
   //get profile picture
   $query4 = "
   SELECT * FROM login_info
   WHERE user = '$user_com_db'
   ";   
   $select4 = mysql_query($query4) or die(mysql_error());
   
   $rows4 = mysql_fetch_assoc($select4) or die(mysql_error());
      $profile_pic = $rows4['profile_picture'];
      $user_id = $rows4['id'];
   echo "
   <div class='rev_cont'>
   <div class='info'>
   <img src='$profile_pic' /> 
   <a href=?p=profile&id=$user_id> $user_com_db </a> 
   

   
   <> <br /> 
   <div class='rev'>
   <strong> $stardb/10 </strong> <br />
   $commetdb
   <> 
   <div id='date'>  <em> Date Added: $datedb </em> <> 
   <>
   <hr />
   
   
     ";
   
   $ratav[]=$stardb; 
   
     
     
}




$sum = array_sum($ratav);

$count = count($ratav);
$av = $sum / $count;
$avf = round($av, 1);
echo"<div id='message'> Rating Avarage: $avf /10 <>";
//}
if (isset($_SESSION['user']))
{
   echo"
   <p> Did you like this story? Did you hate it? Give it a rating and let the author know!</p>
<form action='?p=review&id=$idget' method='post'  target='_self'> 
 
 <label> Your rating is on a scale of 1-10 </label>
 <select name='rat'>
    <option> 1 </option>
    <option> 2 </option>
    <option> 3 </option>
    <option> 4 </option>
    <option> 5 </option>
    <option> 6 </option>
    <option> 7  </option>
    <option> 8 </option>
    <option> 9 </option>
    <option> 10 </option>
 </select>
 <label> Commets: </label>
 
 <textarea name='commet' cols='70' rows='9'></textarea>
 <input name='story' type='hidden' value='$idget' /> <br />
 <input type='submit' value = 'Post' name='submit' />
</form>

   ";
}
else 
{
   echo "<div id='message'> Sign in to post a review! <>";
}

?>



Here are the specifics if you want it.

Here is the response part of the code:
Code: [Select]
<?php
if(isset($_POST['submit']))
{
   $com_form = mysql_real_escape_string(bb($_POST['commet']));
   $rat_form = $_POST['rat'];
   $story_form =  $idget;
   $user = $_SESSION['user'];
   $date = date("Y-m-d");
   $query1 = "
   INSERT INTO story_commets(star, story, user, date_added, commet)
   VALUES($rat_form, '$story_form', '$user', '$date', '$com_form')
   ";
   mysql_query($query1) or die(mysql_error());


      
      
   //}
}
?>
Here is the form part of my code:
Code: [Select]
<?php
if (isset($_SESSION['user']))
{
   echo"
   <p> Did you like this story? Did you hate it? Give it a rating and let the author know!</p>
<form action='?p=review&id=$idget' method='post'  target='_self'> 
 
 <label> Your rating is on a scale of 1-10 </label>
 <select name='rat'>
    <option> 1 </option>
    <option> 2 </option>
    <option> 3 </option>
    <option> 4 </option>
    <option> 5 </option>
    <option> 6 </option>
    <option> 7  </option>
    <option> 8 </option>
    <option> 9 </option>
    <option> 10 </option>
 </select>
 <label> Commets: </label>
 
 <textarea name='commet' cols='70' rows='9'></textarea>
 <input name='story' type='hidden' value='$idget' /> <br />
 <input type='submit' value = 'Post' name='submit' />
</form>

   ";
}
else 
{
   echo "<div id='message'> Sign in to post a review! <>";
}
?>
Its probably something really mundane. HelP!

I have got connection to the the mysql database, how do I get the data from the database to display on the webpage

I used to be good at this but I changed servers and everything is different...  Heres my code so far:

Code: [Select]
<?php
$rated=$_REQUEST['rated'];
echo $rated;
$rating=$_REQUEST['rating'];
echo $rating;

// Make a MySQL Connection
mysql_connect("localhost", "********", "********") or die(mysql_error());
mysql_select_db("*********") or die(mysql_error());

$result = mysql_query("SELECT * FROM main WHERE username = '$rated'")
or die(mysql_error());  

$row = mysql_fetch_array( $result );

$votes = $db_field['$rating'];
$newvotes = $votes + 1;

echo $newvotes;

mysql_query("UPDATE main SET $rating = '$newvotes'
WHERE username = '$rated'");


?>
Whats going on here is the colomb that I want to update comes as a variable $rated (That works) and then the database selects the  row to update with $username (That works) and gets the variable $newvotes by taking the original value of the data its about to update and add 1 to it (That works)  Then it updates the field to $newvotes....

I don't know why the update won't go through... there are no errors....

I'm a beginner to PHP and am stuck as to how I can fetch data from a MYSQL database and output that information in html to the website. Currently I get the information from the database using normal php:

$result = mysql_query("SELECT * FROM truffleProducts");

Then I assign each field from the database to a php variable in a while loop:
 

while ($row = mysql_fetch_array($result)) {
$id = $row{'id'};
$name = $row{'name'};
$price = $row{'Price_per_kg'};
$season = $row{'Season'};
$country = $row{'Country'};
$image = $row{'image'};
$review = $row{'review'};
}

Then I just print each variable in a table using simple html and php. My problem is that it only outputs the latest element or row from my database. I want to output the database within a HTML template so that it is professional and tidy, but i cant figure out how to do that. Any help?
Edited by louiscb, 22 October 2014 - 07:58 AM.