PHP - Form Entry Issue - Adding Record To Mysql Database

Here is what I am trying to accomplish:

I have a students table with a studentID
I also have a notes table and a sched table with studentID

The sched table is working as planned where if the student is scheduled for more than one time he is displayed twice.
However if there are multiple notes per student the student is display for each individual note where I would like only the most current note to be displayed

Here is what the output is:

1- 10:30:00 - 10:50:00   student3 Three   FST   Teacher One   Special1 One   Writing Ratios   09/10
2- 10:30:00 - 10:50:00   student3 Three   FST   Teacher One   Special1 One   Needs to work on fractions and decimals   09/10
3- 13:00:00 - 14:00:00   student3 Three   FST   Teacher One   Special1 One   Writing Ratios   09/10
4- 13:00:00 - 14:00:00   student3 Three   FST   Teacher One   Special1 One   Needs to work on fractions and decimals   09/10

As you can see I have two notes and two schedule times for this student. what I want it to display is only line 1 & 3. which is the newest note in the system.

Below is my code that I am using. Any help would be greatly appreciated.


Code: [Select]
<?php 
$result = mysql_query("SELECT * FROM students 
  LEFT JOIN teachers ON students.teacherId = teachers.teacherId
  LEFT JOIN course ON students.courseId = course.courseId
  LEFT JOIN specialEd ON students.specialId = specialEd.specialId
  LEFT JOIN sched ON students.studentId = sched.studentId 
  ORDER BY start
  ");
echo "<table>";
while ($row = mysql_fetch_array($result)){
$id = "?id=" . $row['studentId'];
echo "<tr>";
echo "<td>" . $row['start'] . " - " . $row['stop'] . "</td>";
echo "<td>" . "<a href='student.php$id'>" . $row['fName'] . " " . $row['lName'] . "</td>";
echo "<td>" . $row['courseName'] . "</td>";
echo "<td>" . $row['teachers_fName'] . " " . $row['teachers_lName'] . "</td>";
echo "<td>" . $row['special_fName'] . " " . $row['special_lName'] . "</td>";
echo "<td>" . $row['note'] . "</td>";
echo "<td>" . date("m/d", strtotime($row['started'])) . "</td>";
echo "</tr>";
}
echo "</table>";
?>

I spent several hours trying to figure this thing out.  Thought I had it nailed, but still getting duplicate record entries into the MySQL DB when I do NOT want them.   Here's the plot:   People filling out the possible attendance form for a Ham Radio event *sometimes* bring a 2nd person (either a spouse or a friend).  The 2nd person may, or may not, also has a Callsign which I need to put INSERT the same MySQL Callsign column.  In any event, to also identify the 2nd person as coming 'with' the 1st person.   MOST of the attendees are individuals with NO 2nd person.   My entry form has these primary fields:   callsign fullname   AND...   callsign2 fullname2   What I came up with was to process the MySQL INSERT for the primary callsign & fullname into their respective MySQL DB Columns (which works fine), and then........... immediately following the main Query INSERT, to do a substitution type thing depending on whether or not a form entry  was made in the callsign2 field, AND/OR, the fullname2 field.   This partially works, but if there is ONLY a primary callsign and fullname in the form, I'm still getting a duplicate record entry which includes the callsign in the `with` column (which should ONLY take place IF there is a 2nd person indicated).   Confusing?   Here is what I have  been wrestling with to try and accomplish the objective, and now my eyes are glazed over ;-(

// TRICKY PART HERE

// If a 2nd Callsign AND a Fullname

if ($callsign2 != ' ' && $fullname2 != ' ') {

// Still make reference to the primary Callsign in the MySQL DB `with` column

$with = $callsign;

// Assignment to allow 2nd Callsign to be entered in the MySQL `callsign` column

$callsign=$callsign2;
$fullname=$fullname2;

$sql="INSERT INTO `mytable` (`callsign`, `fullname`, `with`)
VALUES ('$callsign', '$fullname', '$with')";

// If NO 2nd Callsign BUT a Fullname

} elseif ($callsign2 = ' ' && $fullname2 != ' ') {

// Make reference to the primary Callsign in the MySQL DB `with` column

$with = $callsign;

$callsign=$callsign2;
$fullname=$fullname2;

$sql="INSERT INTO `mytable` (`callsign`, `fullname`, `with`)
VALUES ('$callsign', '$fullname', '$with')";

} else {

// The only thing I could thing of to (hopefully) NOT make a 2nd entry 
// record in the MySQL DB IF there is NO 2nd person referenced

$with = $callsign;

}

if (!mysqli_query($con,$sql)) {
  die('Error: ' . mysqli_error($con));
}

This mostly works EXCEPT if only a single (primary) person entry.   The recap the objetives:   1. If ONLY a primary/single person entry on the form:   * callsign & fullname get INSERTed into the `callsign` and `fullname` columns in the DB as ONLY one record entry   2. If BOTH a primary and 2nd person on the form:   A. IF the 2nd person has a Callsign, then the 2nd record entry would be:   *   callsign2 & fullname2 get INSERTed into the `callsign` & `fullname` columns in the 2nd DB as a separate record entry *   callsign of the primary person also gets INSERTED into the `with` column in the same 2nd DB record entry   B. IF the 2nd person does NOT have a callsign, then the 2nd record entry would be:   *  fullname2 gets INSERTed into the `fullname` column in the DB as a separate 2nd DB record entry *  callsign of the primary person also gets INSERTED into the `with` column in the same 2nd DB record entry   I obvioiusly have overlooked something, but just can't seem to figure it out at this point {SIGH}.   Thanks for any enlightenment.   -FreakingOUT      

Hey i have set up a database and im trying to ad records to it also upload an image, when i submit my form it clears the fields but does not add to the database. There are no errors that get  outputted or anything so it gives no help 

I have read thru my code over and over and just cant see why its not adding. Any help would be great

<html>
<script language="JavaScript">
function validated(){

var matric = document.s.matric.value;
var name = document.s.name.value;
var course = document.s.course.value;
var sem = document.s.sem.value;
var semint = parseInt(sem);
var tel = document.s.tel.value;
var telint = parseInt(tel);
var address = document.s.address.value;
var picture = document.s.picture.value;

if(matric==""){
window.alert("Please enter matric number!");
document.s.matric.focus();
return false;
}
if(name==""){
window.alert("Please enter student name!");
document.s.name.focus();
return false;
}
if(course==""){
window.alert("Please enter student course!");
document.s.course.focus();
return false;
}
if(isNaN(semint)){
window.alert("Please enter student semester!");
document.s.sem.focus();
return false;
}
if(isNaN(telint)){
window.alert("Please enter contact number!");
document.s.tel.focus();
return false;
}
if(address==""){
window.alert("Please enter student address!");
document.s.address.focus();
return false;
}
if(picture==""){
window.alert("Please enter student picture!");
document.s.picture.focus();
return false;
}
}
</script>
<body>
<table width="100%" border="0" cellspacing="0" cellpadding="2">
  <tr>
    <td align="center"><h1><font color="#0000FF" face="Arial">ADD STUDENT PROFILE</font></h1></td>
  </tr>
</table>
<br><br>
<table width="100%" border="0" cellspacing="0" cellpadding="2">
  <tr>
    <td align="right"><font size="1" face="Arial"><a href='main.php'>Student List</a></font></td>
  </tr>
</table>
<br><br>
<form method="post" action="student_form.php" enctype="multipart/form-data" name='s' onsubmit='return validated()';>
<table width="70%" border="0" align="center" cellpadding="2" cellspacing="2">
  <tr>
    <td width="33%" align="right"><font size="2" face="Arial"><strong>Matric Number</strong></font></td>
    <td width="5%" align="center">:</td>
    <td width="62%"><input type='text' name='matric' size=30 maxlength=15></td>
  </tr>
  <tr>
    <td align="right"><font size="2" face="Arial"><strong>Name</strong></font></td>
    <td align="center">:</td>
    <td><input type='text' name='name' size=30 maxlength=50></td>
  </tr>
  <tr>
    <td align="right"><font size="2" face="Arial"><strong>Course</strong></font></td>
    <td align="center">:</td>
    <td><input type='text' name='course' size=30 maxlength=50></td>
  </tr>
  <tr>
    <td align="right"><font size="2" face="Arial"><strong>Semester</strong></font></td>
    <td align="center">:</td>
    <td><input type='text' name='sem' size=5 maxlength=2></td>
  </tr>
  <tr>
    <td align="right"><font size="2" face="Arial"><strong>Sex</strong></font></td>
    <td align="center">:</td>
    <td><input type='radio' name='sex' value='Male' checked> Male  <input type='radio' name='sex' value='Female'> Female</td>
  </tr>
  <tr>
    <td align="right"><font size="2" face="Arial"><strong>Contact Number</strong></font></td>
    <td align="center">:</td>
    <td><input type='text' name='tel' size=30 maxlength=50></td>
  </tr>
  <tr>
    <td align="right"><font size="2" face="Arial"><strong>Address</strong></font></td>
    <td align="center">:</td>
    <td><input type='text' name='address' size=50 maxlength=100></td>
  </tr>
  <tr>
    <td align="right"><font size="2" face="Arial"><strong>Picture</strong></font></td>
    <td align="center">:</td>
    <td>
<input type="hidden" name="MAX_FILE_SIZE" value="10485760">
<input type="file" name="picture"  size="40"> <font size="1" face="Arial"> Maxsize 1MB</font>
</td>
  </tr>
  <tr>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td><input type='submit' name="submit" value='Submit'> <input type='reset' value='Reset'></td>
  </tr>
</table>
<?php

if ($submit) 
{

include 'db_connect.php';

$data = addslashes(fread(fopen($picture, "r"), filesize($picture)));

$pjpeg="image/pjpeg";
$jpeg="image/jpeg";
$gif="image/gif";
$png="image/png";
$bmp="image/bmp";

if ($picture_type == $pjpeg OR $picture_type == $jpeg OR $picture_type == $gif OR $picture_type == $png OR $picture_type == $bmp)
{

$sql="INSERT INTO info (matric, name, course, sem, sex, tel, address ,bin_data,filename,filesize,filetype)
VALUES ('$matric', '$name', '$course', '$sem', '$sex', '$tel', '$address', '$data','$picture_name','$picture_size','$picture_type')";
$result=mysql_query($sql);

header ("Location: main.php");
}
else{
echo "<script language='JavaScript'>";
echo "window.alert('Error! You only can upload jpeg, gif, png, bmp file type.')";
echo "</script>"; 
}
}

?>
</form>
</body>
</html>


Thanks,

Alright,  wasn't quite sure how to summarize this in the title,  but I want to:

Check if a user status is "active" or not based on the UserName input.

I have a table witch holds:

Code: [Select]
VarChar Username      Var CharPassWord     int Active
 Ted                        TedsPW                1
something like the above(assuming it formatted correctly.

In my php script I will want to input a variable for Username to check for:

inputUN in this example would be "Ted".

$UserNameToCheck = $_GET['inputUN'];

Then I want to check for that UserName in the database,  if it exists,  I want pull the value for the "Active" field for just that UserName and echo it.

Thanks for any help.
 

Hi Im having some trouble implementing info into a database

I am using php to upload a file to my server, and at the same time inserting the files name and url into my mysql database.

$sql = "UPDATE uploads SET name = '$name', url='$target_path'";
    $statement = $dbh->prepare($sql); 
    $statement->execute();

This is working, however, when I upload a new file, rather than making a new entry in my database, it just overwrites the first one.

I'm quite new at mysql so was wondering how I would make it add new entrys instead of overwriting the current one?

Greetings,

What I'm trying to do is have users upload their event information into a database which would include a flyer.  I don't want the image file to go into the database (other than the filename) rather I'd like it to be dropped into a directory.  In the same script I'd like to dynamically generate a thumbnail.  I have the two scripts and separately they work fine, but I can't get them to work together.

I'm guessing the conflict because the thumbnail script is using $_POST and the mysql script is using $_SESSION.  If so how can I modify them to both use $_SESSION?

The thumbnail script is goes from line 1 - 146 and the mysql portion is the rest.

The results of processing this look something like this.

QUERY TEXT:
INSERT INTO td_events (eventgenre_sel, eventname, eventvenue, eventdate, eventgenre, eventprice, eventpromoter, eventflyer) VALUES ('12', 'spooky times', 'Ironwood Stage & Grill', '2010-12-17 22:36:00', 'DNB', '5000', 'me', '174366-1.jpg')


<?php

$debug = FALSE;

/**********************************************************************************************
   
   CREATES THUMBNAIL
   
**********************************************************************************************/

 //define a maxim size for the uploaded images
 define ("MAX_SIZE","1024"); 
 // define the width and height for the thumbnail
 // note that theese dimmensions are considered the maximum dimmension and are not fixed, 
 // because we have to keep the image ratio intact or it will be deformed
 define ("WIDTH","500"); 
 define ("HEIGHT","650"); 

  // this is the function that will create the thumbnail image from the uploaded image
 // the resize will be done considering the width and height defined, but without deforming the image
 function make_thumb($img_name,$filename,$new_w,$new_h)
 {
  //get image extension.
  $ext=getExtension($img_name);
  //creates the new image using the appropriate function from gd library
  if(!strcmp("jpg",$ext) || !strcmp("jpeg",$ext) || !strcmp("JPG",$ext))
  $src_img=imagecreatefromjpeg($img_name);

   if(!strcmp("png",$ext) || !strcmp("PNG",$ext))
  $src_img=imagecreatefrompng($img_name);

    //gets the dimmensions of the image
  $old_x=imageSX($src_img);
  $old_y=imageSY($src_img);

   // next we will calculate the new dimmensions for the thumbnail image
  // the next steps will be taken: 
  //  1. calculate the ratio by dividing the old dimmensions with the new ones
  // 2. if the ratio for the width is higher, the width will remain the one define in WIDTH variable
  // and the height will be calculated so the image ratio will not change
  // 3. otherwise we will use the height ratio for the image
  // as a result, only one of the dimmensions will be from the fixed ones
  $ratio1=$old_x/$new_w;
  $ratio2=$old_y/$new_h;
  if($ratio1>$ratio2) {
  $thumb_w=$new_w;
  $thumb_h=$old_y/$ratio1;
  }
  else {
  $thumb_h=$new_h;
  $thumb_w=$old_x/$ratio2;
  }

   // we create a new image with the new dimmensions
  $dst_img=ImageCreateTrueColor($thumb_w,$thumb_h);

  // resize the big image to the new created one
  imagecopyresampled($dst_img,$src_img,0,0,0,0,$thumb_w,$thumb_h,$old_x,$old_y); 

  // output the created image to the file. Now we will have the thumbnail into the file named by $filename
  if(!strcmp("png",$ext))
  imagepng($dst_img,$filename); 
  else
  imagejpeg($dst_img,$filename); 

   //destroys source and destination images. 
  imagedestroy($dst_img); 
  imagedestroy($src_img); 
 }

 // This function reads the extension of the file. 
 // It is used to determine if the file is an image by checking the extension. 
 function getExtension($str) {
         $i = strrpos($str,".");
         if (!$i) { return ""; }
         $l = strlen($str) - $i;
         $ext = substr($str,$i+1,$l);
         return $ext;
 }
 // This variable is used as a flag. The value is initialized with 0 (meaning no error found) 
 // and it will be changed to 1 if an error occurs. If the error occurs the file will not be uploaded.
 $errors=0;
 // checks if the form has been submitted
 if(isset($_POST['Submit']))
 {
 //reads the name of the file the user submitted for uploading
  $image=$_FILES['eventflyer']['name'];
  // if it is not empty
  if ($image) 
  {
  // get the original name of the file from the clients machine
  $filename = stripslashes($_FILES['eventflyer']['name']);
 
  // get the extension of the file in a lower case format
    $extension = getExtension($filename);
  $extension = strtolower($extension);
  // if it is not a known extension, we will suppose it is an error, print an error message 
  // and will not upload the file, otherwise we continue
  if (($extension != "jpg")  && ($extension != "jpeg") && ($extension != "JPG") && ($extension != "PNG") && ($extension != "png"))
  {
  echo '<h1>Unknown extension!</h1>';
  $errors=1;
  }
  else
  {
  // get the size of the image in bytes
  // $_FILES[\'image\'][\'tmp_name\'] is the temporary filename of the file in which 
// the uploaded file was stored on the server
  $size=getimagesize($_FILES['eventflyer']['tmp_name']);
  $sizekb=filesize($_FILES['eventflyer']['tmp_name']);

  //compare the size with the maxim size we defined and print error if bigger
  if ($sizekb > MAX_SIZE*500)
  {
  echo '<h1>You have exceeded the size limit!</h1>';
  $errors=1;
  }

   //we will give an unique name, for example the time in unix time format
  $image_name=$filename;
  //the new name will be containing the full path where will be stored (images folder)
    $newname="flyers/".$image_name;
  $copied = copy($_FILES['eventflyer']['tmp_name'], $newname);
  //we verify if the image has been uploaded, and print error instead
  if (!$copied) 
  {
  echo '<h1>Copy unsuccessfull!</h1>';
  $errors=1;
  }
  else
  {
  // the new thumbnail image will be placed in images/thumbs/ folder
  $thumb_name='flyers/thumb_'.$image_name;
  // call the function that will create the thumbnail. The function will get as parameters 
  // the image name, the thumbnail name and the width and height desired for the thumbnail
  $thumb=make_thumb($newname,$thumb_name,WIDTH,HEIGHT);
  }} }}

  //If no errors registred, print the success message and show the thumbnail image created
 if(isset($_POST['Submit']) && !$errors) 
 {
  echo "<h1>Thumbnail created Successfully!</h1>";
  echo '<img src="'.$thumb_name.'">';
 }


/************************************************************
   Adjust the headers...
************************************************************/
header("Expires: Thu, 17 May 2001 10:17:17 GMT");    // Date in the past
   header ("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); // always modified
header ("Cache-Control: no-cache, must-revalidate");  // HTTP/1.1
header ("Pragma: no-cache");                          // HTTP/1.0

/*****************************************************************************
   Check the session details.
   we will store all the post variables in session variables
   this will make it easier to work with the verification routines
*****************************************************************************/
session_start();


if (!isset($_SESSION['SESSION'])) require_once( "../include/session_init.php");

$arVal = array();
require_once("../include/session_funcs1.php");

reset ($_POST);
while (list ($key, $val) = each ($_POST)) {
if ($val == "") $val = "NULL";
$arVals[$key] = (get_magic_quotes_gpc()) ? $val : addslashes($val); 
if ($val == "NULL")
$_SESSION[$key] = NULL;
else
$_SESSION[$key] = $val;

if ($debug) echo $key . " : " . $arVals[$key] . "<br>";
}

/**********************************************************************************************
   Make sure session variables have been set and then check for required fields
   otherwise return to the registration form to fix the errors.
**********************************************************************************************/

// check to see if these variables have been set...
if ((!isset($_SESSION["eventname"])) || (!isset($_SESSION["eventvenue"])) || (!isset($_SESSION["eventdate"])) ||  (!isset($_SESSION["eventgenre"]))
 || (!isset($_SESSION["eventprice"])) || (!isset($_SESSION["eventpromoter"])) || (!isset($_SESSION["eventflyer"]))) {
 resendToForm("?flg=red");
}
// form variables must have something in them...
if ($_SESSION['eventname'] == "" || $_SESSION['eventvenue'] == "" || $_SESSION['eventdate'] == "" || $_SESSION['eventgenre'] == "" || $_SESSION['eventprice'] == "" || $_SESSION['eventpromoter'] == "" || $_SESSION['eventflyer'] == "") {
resendToForm("?flg=red");
}

/**********************************************************************************************
  Insert into the database...
**********************************************************************************************/

$conn = mysql_connect($_SESSION['MYSQL_SERVER1'],$_SESSION['MYSQL_LOGIN1'],$_SESSION['MYSQL_PASS1']) or die ('Error connecting to mysql');

mysql_select_db($_SESSION['MYSQL_DB1']) or die("Unable to select database");

$eventgenre_sel = addslashes($_REQUEST['eventgenre_sel']);
$eventname = addslashes($_REQUEST['eventname']);
$eventvenue = addslashes($_REQUEST['eventvenue']);
$eventdate = addslashes($_REQUEST['eventdate']);
$eventgenre = addslashes($_REQUEST['eventgenre']);
$eventprice = addslashes($_REQUEST['eventprice']);
$eventpromoter = addslashes($_REQUEST['eventpromoter']);
$eventflyer = addslashes($_REQUEST['eventflyer']);

$sqlquery = "INSERT INTO td_events (eventgenre_sel, eventname, eventvenue, eventdate, eventgenre, eventprice, eventpromoter, eventflyer) "
."VALUES ('$eventgenre_sel', '$eventname', '$eventvenue', '$eventdate', '$eventgenre', '$eventprice', '$eventpromoter', '$eventflyer')";

echo 'QUERY TEXT:<br />'.$sqlquery;

$result = MYSQL_QUERY($sqlquery);

$insertid = mysql_insert_id();

/*** This following function will update session variables and resend to the form so the user can fix errors ***/

function resendToForm($flags) {
reset ($_POST);
// store variables in session...
while (list ($key, $val) = each ($_POST)) {
$_SESSION[$key] = $val;
}
// go back to the form...
//echo $flags;
header("Location: /user_registration.php".$flags);
exit;
}
mysql_close($conn);


?>

hello, i am hoping someone can help, i have a form that has a body and title fields and then sends to this function below.
it all works fine, but when i add a image or a link it stores it in the text field of the db like this:

<IMG alt=\"\" src=\"/public/images/231781538234094.jpg\" width=796></P>

this is what it should be /public/images/231781538234094.jpg

so when i view the image it doesent show it and i right click the image and goto image properties and i get this:
http://test.cyberglide.co.uk/%22public/images/231781538234094.jpg/%22

Code: [Select]
function content_update() {

$title = mysql_real_escape_string($_POST['title']);
$body = mysql_real_escape_string($_POST['body']);
$page = mysql_real_escape_string($_POST['page']);
$location = mysql_real_escape_string($_POST['location']);
$id = mysql_real_escape_string($_POST['id']);

$sql = "UPDATE content SET title = '$title', body = '$body', page = '$page', location = '$location' WHERE id = '$id'";
$res = mysql_query($sql) or die(mysql_error());
echo "<script>window.location='content.php'</script>";
}

if i manually edit it on the db it works fine

please help, many thanks.

So i have an event page where it will show the next 3 events, then i need logged in users to click either of two buttons to say there attending or not attending.

i have the below code showing events, and the <form> and the submit and both buttons, but if i submit 1 button on event ID: 1 it inserts data into the database but for event ID: 2, and if i click the button on event ID :2 it also puts it into database with eventid:2

so no matter which event i click it seems to submit data with the latest event ID shown on page, and not for "each" event seperatly.

i have moved the submit query everywhere around and still same results or duplicate results if its in the loop.

i assume its looping the submit and only submitting the latests event ID.

 

<?php
if ($result = $con->query("SELECT * FROM events ORDER BY id ASC LIMIT 3")) {
if ($result->num_rows > 0) {
while ($row = $result->fetch_object()) {
$event_id = $row->id;
// set up table and echo data!
echo "<table border='1' cellpadding='2' width='50%'>";
echo "<tr><td>";
echo "<p><img src='images/raid_banners/" . $row->bannerimg . "'>" . $row->name . " (iLvl: " . $row->itemlevel . ")</p>";
echo "<p>Event Starts: " . $row->datestart . " - " . $row->timestart . "</p>";
echo "<p>Event Ends: " . $row->dateend . " - " . $row->timeend . "</p>";
echo "<p>Raid Lead: " . $row->raidlead . "</p>";
echo "<form action='' name='$event_id' method='post'>";
// Process and populate SELECT form element
echo "<select name=\"charname\">";
$sql = mysqli_query($con, "SELECT * FROM characters WHERE userid = $userid");
while ($row = $sql->fetch_assoc()){ echo "<option value=\"{$row['id']}\">{$row['charname']}</option>"; }
echo "</select>";
echo "<input type='hidden' name='raidid' value ='$event_id'>";
echo "<input type='hidden' name='action' value='submit' />";
echo "<input type=\"submit\" name=\"submit\" value=\"going\">";
echo "<input type=\"submit\" name=\"submit\" value=\"notgoing\">";
echo "</form></td></tr></table><br><br>"; 
 } 
 if(isset($_POST['action'])){
$charid = $_POST['charname'];
$submit = $_POST['submit'];
// Submit the data from dropdown in the form
mysqli_query($con,"INSERT INTO eventsignup (eventid, charid, userid, status) VALUES ('$event_id', '$charid', '$userid', '$submit')");  } 
}
else { echo "No results to display!"; } }
else { echo "Error: " . $con->error; }
$con->close();
?>

any help would be awesome. im tearing my hair out here.

I'm trying to add some data into my database through a form interface, but this form submits even when the page loads. This means the form submits regardless of the validation I have set in place, so every time the page is loaded, the database receives empty fields. Could you guys please help me with my problem?
Here's my code:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">;
<html xmlns="http://www.w3.org/1999/xhtml">;

<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Form to add quotes</title>
</head>
<body>

<?php

//defining variables

$genre = "";
$error_quote="";
$error_author="";
$error_date="";
$error_url="";
$error_genre="";
$quote = "";
$author="";
$q_date="";
$url="";
$output_form = true;



if (isset($_POST['submit'])) {


$output_form = true;

if (trim($quote)=='' OR strlen(trim($quote)) < 2 OR strlen(trim($quote)) > 16)
{
$error_quote="Please enter a <b>Quote</b> between 2 to 16 characters long <br/>";
}

if(trim($author)=='' OR strlen(trim($author)) < 2 OR strlen(trim($author)) > 16)
{
$error_author="Please enter an <b>Author</b> between 2 to 16 characters long <br/>";
}

if(trim($q_date)=='' OR strlen(trim($q_date)) < 2 OR strlen(trim($q_date)) > 24)
{
$error_date="Please enter a <b>Date</b> between 2 to 24 characters long <br/>";
}

if(trim($url)=='' OR strlen(trim($url)) < 2 OR strlen(trim($url)) > 246)
{
$error_url="Please enter a <b>URL</b> between 2 to 246 characters long <br/>";
}

if(!isset($genre) OR $genre=='')
{
$error_genre=" - Please select a <b>Genre</b>. <br/>";
}

}

else {
$output_form = false;

}

if ($output_form)
{
?>


<form method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>">

<table>
<tr><td>Quote</td><td><input type="text" name="quote" value="<?php if (isset($quote)) echo $quote ; ?>"></td><td><?php echo $error_quote;?></td></tr>
<tr><td>Author</td><td><input type="text" name="author" value="<?php if (isset($author)) echo $author ; ?>"></td><td><?php echo $error_author;?></td></tr>
<tr><td>Date</td><td><input type="text" name="q_date" value="<?php if (isset($q_date)) echo $q_date ; ?>"></td><td><?php echo $error_date;?></td></tr>
<tr><td>URL</td><td><input type="text" name="url" value="<?php if (isset($url)) echo $url ; ?>"></td><td><?php echo $error_url;?></td></tr>
</table>
<p>Gen </p><p> <input type="radio" name="genre" value="humour"
<?php if (isset($genre) AND $genre=="humour")
echo $genre; ?> />Humour <?php echo $error_genre;?>

<input type="radio" name="genre" value="politics"
<?php if (isset($genre) AND $genre=="politics")
echo $genre; ?> />Politics <?php echo $error_genre;?>


<input type="radio" name="genre" value = "romance"
<?php if (isset($genre) AND $genre=="romance")
echo $genre; ?>/>Romance <?php echo $error_genre;?>

</p>
<p><input type = "submit" name="submit" value = "add quote" /></p>
</form>
<?php
}



$dbhost = 'localhost';
$dbuser = '...';
$dbpass = '...';
$dbname = 'anevins';

// make a connection to the database
$conn = mysql_connect($dbhost, $dbuser, $dbpass)
OR die('Connection failed: '. mysql_error());

// select the database
mysql_select_db($dbname)
OR die('Database select failed: '. mysql_error());

// set up the query to insert the new data
$query = "INSERT INTO quotes (id, quote, author, q_date, url, genre)
VALUES ('', '$quote', '$author', '$q_date', '$url', '$genre')";

$result = mysql_query($query) OR die('Query failed: ' . mysql_error());


echo "<p>Thank you for adding your quote</p>";
mysql_close($conn);
exit();
?>

</body>
</html>

At the moment I am getting this error message when I am trying to add a record:

Quote

mysqli_stmt_bind_param() [function.mysqli-stmt-bind-param]: Number of elements in type definition string doesn't match number of bind variables


Below is my code

Code: [Select]
<?php

ini_set('display_errors',1);
error_reporting(-1);

require_once ('./includes/config.inc.php');

require_once (MYSQL);

$add_cat_errors = array();

if ($_SERVER['REQUEST_METHOD'] == 'POST')
{
// Check for a name:
if (empty($_POST['product'])) {
$add_cat_errors['product'] = 'Please enter the name!';
}

// Check for a description:
if (empty($_POST['prod_descr'])) {
$add_cat_errors['prod_descr'] = 'Please enter the description!';
}

// Check for a category:
if (!isset($_POST['cat']) || !filter_var($_POST['cat'], FILTER_VALIDATE_INT, array('min_range' => 1))) {
$add_cat_errors['cat'] = 'Please select a category!';
}

// Check for a price:
if (empty($_POST['price']) || !filter_var($_POST['price'], FILTER_VALIDATE_FLOAT) || ($_POST['price'] <= 0)) {
$add_cat_errors['price'] = 'Please enter a valid price!';
}

// Check for a category:
if (!isset($_POST['directory']) || !filter_var($_POST['directory'], FILTER_VALIDATE_INT, array('min_range' => 1))) {
$add_cat_errors['directory'] = 'Please select a directory!';
}

// Check for an image:
if (is_uploaded_file ($_FILES['image']['tmp_name']) && ($_FILES['image']['error'] == UPLOAD_ERR_OK)) {

$file = $_FILES['image'];

$size = ROUND($file['size']/1024);

// Validate the file size:
if ($size > 512) {
$add_cat_errors['image'] = 'The uploaded file was too large.';
} 

// Validate the file type:
$allowed_mime = array ('image/jpeg', 'image/JPG', 'image/jpg');
$allowed_extensions = array ('.jpg', 'jpeg');
$image_info = getimagesize($file['tmp_name']);
$ext = substr($file['name'], -4);
if ( (!in_array($file['type'], $allowed_mime)) 
||   (!in_array($image_info['mime'], $allowed_mime) ) 
||   (!in_array($ext, $allowed_extensions) ) 
) {
$add_cat_errors['image'] = 'The uploaded file was not of the proper type.';
} 

// Move the file over, if no problems:
if (!array_key_exists('image', $add_cat_errors)) {

// Create a new name for the file:
$new_name = (string) sha1($file['name'] . uniqid('',true));

// Add the extension:
$new_name .= ((substr($ext, 0, 1) != '.') ? ".{$ext}" : $ext);
//$new_name = $dir . '/' . $new_name;
$dest =  "../db/images/$new_name";

// Move the file to its proper folder but add _tmp, just in case:

//$dest =  "../db/images/$new_name";
$dirs = array('full_heads', 'human_hair', 'lip_tattoos', 'ponytails', 'synthetic_hair');

if (move_uploaded_file($file['tmp_name'], $dest)) {

// Store the data in the session for later use:
$_SESSION['image']['new_name'] = $new_name;
$_SESSION['image']['file_name'] = $file['name'];

// Print a message:
echo '<h4>The file has been uploaded!</h4>';

} else {
trigger_error('The file could not be moved.');
unlink ($file['tmp_name']);
}

} // End of array_key_exists() IF.

} elseif (!isset($_SESSION['image'])) { // No current or previous uploaded file.
switch ($_FILES['image']['error']) {
case 1:
case 2:
$add_cat_errors['image'] = 'The uploaded file was too large.';
break;
case 3:
$add_cat_errors['image'] = 'The file was only partially uploaded.';
break;
case 6:
case 7:
case 8:
$add_cat_errors['image'] = 'The file could not be uploaded due to a system error.';
break;
case 4:
default: 
$add_cat_errors['image'] = 'No file was uploaded.';
break;
} // End of SWITCH.

} // End of $_FILES IF-ELSEIF-ELSE.



// Check for a stock:
if (empty($_POST['stock']) || !filter_var($_POST['stock'], FILTER_VALIDATE_INT, array('min_range' => 1))) {
$add_cat_errors['stock'] = 'Please enter the quantity in stock!';
}

if (empty($add_cat_errors))
{
$query = "INSERT INTO product (product, prod_descr, catID, price, dirID, image, stock) VALUES (?, ?, ?, ?, ?, ?, ?)";
// Prepare the statement:
$stmt = mysqli_prepare($dbc, $query);
// For debugging purposes:
// if (!$stmt) echo mysqli_stmt_error($stmt);

// Bind the variables:
mysqli_stmt_bind_param($stmt, 'sssssi', $name, $desc, $_POST['cat'], $_POST['price'], $_POST['directory'], $_SESSION['image']['new_name'], $_POST['stock']);

// Make the extra variable associations:
$name = strip_tags($_POST['product']);
$desc = strip_tags($_POST['prod_descr']);
// Execute the query:
mysqli_stmt_execute($stmt);

if (mysqli_stmt_affected_rows($stmt) == 1) { // If it ran OK.

// Print a message:
echo '<h4>The product has been added!</h4>';

// Clear $_POST:
$_POST = array();

// Clear $_FILES:
$_FILES = array();

// Clear $file and $_SESSION['image']:
unset($file, $_SESSION['image']);

} else { // If it did not run OK.
trigger_error('The product could not be added due to a system error. We apologize for any inconvenience.');
unlink ($dest);
}

} // End of $errors IF.

} else { // Clear out the session on a GET request:
unset($_SESSION['image']);
} // End of the submission IF.

require_once ('./includes/form_functions.inc.php');
?>

<form enctype="multipart/form-data" action="add_product.php" method="post" accept-charset="utf-8">

<input type="hidden" name="MAX_FILE_SIZE" value="524288" />

Product<br /><?php create_form_input('product', 'text', $add_cat_errors); ?>
           
            Description<br /><?php create_form_input('prod_descr', 'textarea', $add_cat_errors); ?>
           
Category<br /><select name="cat"<?php if (array_key_exists('cat', $add_cat_errors)); ?>>
<option>Select One</option>
<?php // Retrieve all the categories and add to the pull-down menu:
$q = 'SELECT catID, cat FROM category ORDER BY cat ASC';
$r = mysqli_query ($dbc, $q);
while ($row = mysqli_fetch_array ($r, MYSQLI_NUM)) {
echo "<option value=\"$row[0]\"";
// Check for stickyness:
if (isset($_POST['cat']) && ($_POST['cat'] == $row[0]) ) echo ' selected="selected"';
echo ">$row[1]</option>\n";
}
?>
</select><?php if (array_key_exists('cat', $add_cat_errors)) echo $add_cat_errors['cat']; ?>
           
            Price<br /><?php create_form_input('price', 'text', $add_cat_errors); ?>
           
            Directory<br /><select name="directory"<?php if (array_key_exists('directory', $add_cat_errors)); ?>>
<option>Select One</option>
<?php // Retrieve all the categories and add to the pull-down menu:
$q = 'SELECT dirID, directory FROM directory ORDER BY directory ASC';
$r = mysqli_query ($dbc, $q);
while ($row = mysqli_fetch_array ($r, MYSQLI_NUM)) {
echo "<option value=\"$row[0]\"";
// Check for stickyness:
if (isset($_POST['directory']) && ($_POST['directory'] == $row[0]) ) echo ' selected="selected"';
echo ">$row[1]</option>\n";
}
?>
</select><?php if (array_key_exists('directory', $add_cat_errors)) echo $add_cat_errors['directory']; ?>
</select>
           
            Image<br /><?php

// Check for an error:
if (array_key_exists('image', $add_cat_errors)) {

echo $add_cat_errors['image'] . '<br /><input type="file" name="image"/>';

} else { // No error.

echo '<input type="file" name="image" />';

// If the file exists (from a previous form submission but there were other errors),
// store the file info in a session and note its existence:
if (isset($_SESSION['image'])) {
echo "<br />Currently '{$_SESSION['image']['file_name']}'";
}

} // end of errors IF-ELSE.
 ?>
          <br />

Stock<br /><?php create_form_input('stock', 'text', $add_cat_errors); ?>


<input type="submit" value="Add This Product" class="button" />


</fieldset>

</form>

How can I please solve this? Because I have checked my code and I have no idea where I am going wrong

Hi I've been scouring the net and I cant find anything that works. Can someone tell me how to put a delete button next to each record? Any help is appreciated, thank you!

Code: [Select]
$term = strtolower ($_POST['term']);   
$sql = mysql_query("select * from $table where first like '%$term%' or last like '%$term%'");
while ($row = mysql_fetch_array($sql)){     
echo 'ID: '.$row['id'];     
echo '<br/> first: '.$row['first'];     
echo '<br/> last: '.$row['last'];
echo '<br/> phone: '.$row['phone'];   
echo '<br/> mobile: '.$row['mobile'];   
echo '<br/> fax: '.$row['fax'];     
echo '<br/> email: '.$row['email'];     
echo '<br/> web: '.$row['web'];         
echo '<br/><br/>';     }   
?>
 
</p>

Could anyone help me making a login function that checks the txt document if user and pw exists/are correct? -and if they are, sends you to a logged in page. This is for a assignment which is why I have to store the information in a text document, I know it's unsafe. Also i know i should use $_Sessions but I'm not sure how to use it and where to put it.

So far I have created the form which has 2 buttons one for registering and one for logging in. I have also created the registration function which checks the text file if the username already exists if not it will register it.

 

<html lang="eng">
<head>

    <link rel="stylesheet" href="style.css">
    <title>name</title>

</head>

<body>


<div class="formdiv">

    <h2>Log in or register</h2>

    <form action="" method="post">

        <p>Username<p style="color:black">*</p> <input type="text" name="user" placeholder="Type in your username" required>
        <p>Password<p style="color:black">*</p> <input type="password" name="pw" placeholder="Type in your password" required>

        <?php

        if (isset($_POST['saveBtn'])){
            $username  = $_POST['user'];
            $password = $_POST['pw'];

            $error = register($username);

            if ($error == '') {
                echo "User: $username has been registered!<br/>";

            }
            else echo $error;

        }
        ?>

        <input type="submit" name="saveBtn" value="Save new user">
        <input type="submit" name="loginBtn" value="Login">


    </form>
</div>


<?php // Registration

function register($user){

    $textError = '';

    // Check and see if user exists
    $UserPassTxt = fopen("userpwd.txt","a+"); // Opens text doc
    rewind($UserPassTxt);

    while (!feof($UserPassTxt)) {
        $line = fgets($UserPassTxt);
        $tmp = explode(':', $line);
        if ($tmp[0] == $user) {
            $textError = "Username already exists!";
            break;
        }
    }

    if ($textError == ''){
        $hash = password_hash('', PASSWORD_DEFAULT);

        fwrite($UserPassTxt, "\n$user: $hash");
    }

    fclose($UserPassTxt); // Closes txt doc

    return $textError;

}

?>

<?php //Login

function login($user, $pass){


}

?>




</body>


///here's my best attempt at the function

<?php //Login

$error = '0';

if (isset($_POST['loginBtn'])){

    $username = $_POST['user'];
    $password = $_POST['pw'];

    $error = login($username,$password);
}


function login($user, $pass){
    $errorText = '';
    $validUser = false;

    $UserPassTxt = fopen("userpwd.txt","r");
    rewind($UserPassTxt);

    while (!feof($UserPassTxt)) {
        $line = fgets($UserPassTxt);
        $tmp = explode(':', $line);
            if ($tmp[0] == $user) {

            if (trim($tmp[1]) == trim(password_hash('', PASSWORD_DEFAULT))){
                $validUser= true;
                $_SESSION['user'] = $user;
            }
            break;
        }
    }
    fclose($UserPassTxt);

    if ($validUser != true) $errorText = "Not correct username or password";

if ($validUser == true) $_SESSION['validUser'] = true;
    else $_SESSION['validUser'] = false;

return $errorText;
}

function logoutUser(){
unset($_SESSION['validUser']);
unset($_SESSION['user']);
}

function checkUser(){
if ((!isset($_SESSION['validUser'])) || ($_SESSION['validUser'] != true)){
    header('Location: index.php');
}
}

?>

 

i'm trying to get the username of the last person to enter something into a database table,and display it an html table. the problem is, the query is failing, and i get the error
"Table 'forum.posts' doesn't exist". if in the error message "forum" means the name of the database, and "posts" the name of the table, there is something wrong, as they both exist.

the code i'm using is below

$list = "SELECT * FROM section_main ORDER BY section_title";
$result = mysql_query($list) or die ("Query failed");
$numofrows = mysql_num_rows($result);
for($j = 0; $j < $numofrows; $j++) { 
    $row = mysql_fetch_array($result);  
    echo "<tr><th>". $row['section_title']."</th></tr>";

$query2 = "SELECT * FROM section_sub WHERE section_id = '".$row['section_id']."' ORDER BY section_sub_title";
$result2 = mysql_query($query2) or die("Select Error :" . mysql_error()); 
$numofrows2 = mysql_num_rows($result2);
for($i = 0; $i<$numofrows2; $i++){
$row2 = mysql_fetch_array($result2);
echo "<tr><td><a href='display_forum.php?id={$row2[section_sub_id]}'>".stripslashes($row2[section_sub_title])."</a></td><td>"; 

$new = mysql_query("Select * FROM posts WHERE section_sub_id = '".$row2['section_sub_id'] . " ' ") or die ("Select Error :" . mysql_error()); //this is where the error message is from
$lastpost = mysql_fetch_assoc($new);
echo $lastpost['username']; 

echo"</td></tr>";
}
}


i've checked that the names of the tables and fields in the queries are correct, but i cant think of anything else that might be wrong.

any help would be great.

Here is my add driver button