PHP - Query Does Not Work In Script, Yet Does When Manually Entered In Phpmyadmin

I'm trying to update every record where one field in a row is less than the other. The code gets each row i'm looking for and sets up the query right, I hope I combined the entire query into one string each query seperated by a ; so it's like
UPDATE `table` SET field2= '1' WHERE field1= '1';UPDATE `table` SET field2= '1' WHERE field1= '2';UPDATE `table` SET field2= '1' WHERE field1= '3';UPDATE `table` SET field2= '1' WHERE field1= '4';UPDATE `table` SET field2= '1' WHERE field1= '5';
this executes properly if i run the query in phpMyAdmin, however when I run the query in PHP, it does nothing... Any advice?

I've got a script that's been running away happily as a cron job for the last few days, but it's suddenly decided to stop working. When I run the script manually it works perfectly, but not when I run it as a cron job. I've done some debugging and I've found that the cause of the problem appears to be an ftp_get function that I'm using. I'm guessing I need to either change a file path, or a file permission, but I'm not sure to what. Here's the info:

Code: [Select]
        $local_dir = '../../col_protected/';

       $c = ftp_connect('www.mydomain.net')     or die("Can't connect");

ftp_login($c,'ftp_username','ftp_password')     or die("Can't login");

ftp_get($c, $local_dir.$filename, FTP_ASCII) or die("Can't transfer");

The FTP connect and login are still working fine, it's the ftp_get that's causing the problem. The '../../col_protected/' directory is on the same level as the public_html (ie. outside the public_html) with file permissions set to 777.

The cron is running at /home/username/public_html/col/proc1.php


Can anyone advise please?

Many thanks,
Chris

Hello everyone,

I'm having this problem which is really annoying, tried to solve it but couldn't, I write that code in PHPMyAdmin and it works great, but it doesn't work in the website it self

ok long story short, there are three tables, hotels, cities, countries
hotels include in addition to hotel info, 2 columns (city_id) and (country_id)
Cities include id and name and also countries include id and name

what I was trying to do, that when a person inputs a city or country name in the search form, it should get the hotels that exists in this city or country, but unfortunately it shows all the hotels in all cities and countries, although the pagination code for number of pages works just fine, it count the number of hotels in that city or country and show the number of pages correctly

so here is the code for both

for hotel search

Code: [Select]
class hotelManager
{


public function getHotel($where)
{
$where = isset($_POST['where']) ? $_POST['where'] : "";
$dbObj = new DB();
$sql = "select * from hotels where city_id = (select id from cities where name = '$where' ) or country_id = (select id from countries where name = '$where' )";
$result = MYSQL_QUERY($sql);
$arr = array();
echo "<table>";
while($row = mysql_fetch_array($result))
{
echo "<tr>";
echo "<td valign=\"top\" width=\"120px\">";
$rowid = $row['id'];
$imageqry=mysql_query("SELECT * FROM `hotelphotos` where hotel_id='$rowid' LIMIT 1");
$image=mysql_fetch_array($imageqry);
$imagename=$image['attachmentName'];
echo "<img src=\"foxmaincms/webroot/files/small/$imagename\"/>";
echo "</td>";
echo "<td valign=\"top\">";

echo "<table>
<tr>
<td valign=\"top\">
<a href=\"hotels.php?id=".$row['id']."\" class=\"titleslink\">".$row['name']."</a>
</td>
</tr>
<tr>
<td class=\"text\" valign=\"top\">
".$row['location']."
</td>
</tr>
</table>";

echo "</td>";
echo "</tr>";
}
echo "</table>";

for hotel pagination

Code: [Select]
<?php
  include("includes/hotelsManager.php");
  $hotelObj = new hotelManager();
  $where = isset($_POST['where']) ? $_POST['where'] : "";
  if(isset($_POST['where']))
  {
    
$hotelObj -> getHotel($where);


$per_page = 9;

//Calculating no of pages
$sql = "select * from hotels where city_id = (select id from cities where name = '$where' ) or country_id = (select id from countries where name = '$where' )";
$result = MYSQL_QUERY($sql) or die("<br />No Hotels found in this city, please check the city name and try again");
$count = mysql_num_rows($result);
$pages = ceil($count/$per_page)
?>


<div id="loading" ></div>
<div id="maincontent" ></div>
<ul id="pagination">
thank you in advance

Hi, after following lots of advice and changing to MySqli I am running into a few probs. This is me just probably missing something stupid, I know what I want, but can't figure out what query I should use and where I should place it. All the queries I have tried have failed.   I just need a query that gets the $current_stored_password from the password field on the database, to confirm the last check

elseif 
	($current_password !== $current_stored_password) {
	include 'includes/overall/header.php';
	echo $current_password . ' AND ' . $_POST['current_password'] . ' Password and password again do not match';
	include 'includes/overall/header.php';

}

Here is the whole script.

<?php
session_start();
error_reporting(0);
//ini_set('display_errors', '1');

require( 'database.php' );

$username = $_SESSION['loggedinuser'];
$current_stored_password = $_SESSION['password'];
$current_password = $_POST['current_password'];
$password = mysqli_real_escape_string($con, md5( $_POST['password']));
$password_again = mysqli_real_escape_string($con, md5( $_POST['password_again']));


// Run checks

if	(isset($_POST['current_password'], $_POST['password'], $_POST['password_again'])) {
	
if( strlen( $_POST['current_password'] ) < 8 )
    {
        include('includes/overall/header.php');
        echo "Password Must Be 8 or More Characters.";
        include('includes/overall/footer.php');
}
elseif( strlen( $_POST['password'] ) < 8 )
    {
        include('includes/overall/header.php');
        echo "Password Must Be 8 or More Characters.";
        include('includes/overall/footer.php');
    }
elseif 
		( strlen( $_POST['password_again'] ) < 8 )
    {
        include('includes/overall/header.php');
        echo "Password Must Be 8 or More Characters.";
        include('includes/overall/footer.php');
    }
elseif 
	($password !== $password_again) {
	include 'includes/overall/header.php';
	echo ' Password and password again do not match';
	include 'includes/overall/header.php';
}
elseif 
	($current_password !== $current_stored_password) {
	include 'includes/overall/header.php';
	echo $current_password . ' AND ' . $_POST['current_password'] . ' Password and password again do not match';
	include 'includes/overall/header.php';

} else {

// Define a query to run 
$query = "UPDATE `user` SET `password` = '$password' WHERE `username` = '$username'"; 

// Query the database 
$result = mysqli_query($con,$query); 

// Check if the query failed 
if( !$result ) 
{ 
   die('There was a problem executing the query ('.$query.'):<br>('.mysqli_errno($con).') '.mysqli_error($con)); 
} 

else {

include 'includes/overall/header.php';
	echo 'Password has been changed';
include 'includes/overall/footer.php';
}    
}
}

// Close the connection 
mysqli_close($con); 
?> 

At the moment the message displayed when the form is submitted is

	echo $current_password . ' AND ' . $_POST['current_password'] . ' Password and password again do not match';
 

How do I retrieve the password from the database to compare against the current password entered by the user? Any help is much appreciated.   PS. Yes I know I have repeated code and that md5 is not secure, but I am just building onto a template I got and will be making changes to shorten the code and secure the password soon    

I have the following php code that errors as indicated:

$query = $con->query('SELECT FILENAME, country, area, city FROM download WHERE FILENAME is not null');

Fatal error: Uncaught PDOException: SQLSTATE[42S22]: Column not found: 1054 Unknown column 'country' in 'field list' in /home/larry/web/test/public_html/report1.php:47 Stack trace: #0 /home/larry/web/test/public_html/report1.php(47): PDO->query('SELECT FILENAME...') #1 {main} thrown in /home/larry/web/test/public_html/report1.php on line 47

The Select statement doesn't error when run in mysql shell or phpmyadmin. Here's the result of show create table download:

localhost/test/download/        http://localhost/phpmyadmin/tbl_sql.php?db=test&table=download&token=5739c407033be3e118287bc7a9041c2c
 Current selection does not contain a unique column. Grid edit, checkbox, Edit, Copy and Delete features are not available. 

Your SQL query has been executed successfully.

show create table download

download    CREATE TABLE `download` (
  `ID` int(5) NOT NULL AUTO_INCREMENT,
  `LOG_TIME` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,
  `IP_ADDRESS` int(64) unsigned NOT NULL,
  `FILENAME` varchar(50) COLLATE utf8_general_mysql500_ci DEFAULT NULL,
  `country` varchar(50) COLLATE utf8_general_mysql500_ci DEFAULT NULL,
  `area` varchar(50) COLLATE utf8_general_mysql500_ci DEFAULT NULL,
  `city` varchar(50) COLLATE utf8_general_mysql500_ci DEFAULT NULL,
  PRIMARY KEY (`ID`),
  UNIQUE KEY `ID` (`ID`)
) ENGINE=InnoDB AUTO_INCREMENT=1266 DEFAULT CHARSET=utf8 COLLATE=utf8_general_mysql500_ci    

Does anyone have an idea why this is happening?

If you also have any feedback on my code, please do tell me. I wish to improve my coding base.

Basically when you fill out the register form, it will check for data, then execute the insert query. But for some reason, the query will NOT insert into the database. In the following code below, I left out the field ID. Doesn't work with it anyways, and I'm not sure it makes a difference.

Code:

  Code: [Select]
mysql_query("INSERT INTO servers (username, password, name, type, description, ip, votes, beta) VALUES ($username, $password, $name, $server_type, $description, $ip, 0, 1)");
Full code:

Code: [Select]
<?php
include_once("includes/config.php");
 
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title><? $title; ?></title>
<meta http-equiv="Content-Language" content="English" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<link rel="stylesheet" type="text/css" href="style.css" media="screen" />
</head>
<body>
 
<div id="wrap">
 
<div id="header">
<h1><? $title; ?></h1>
<h2><? $description; ?></h2>
</div>
 
<? include_once("includes/navigation.php"); ?>
 
<div id="content">
<div id="right">
<h2>Create</h2>
<div id="artlicles">
<?php
 
if(!$_SESSION['user'])
{
 
        $username = mysql_real_escape_string($_POST['username']);
        $password = mysql_real_escape_string($_POST['password']);
        $name = mysql_real_escape_string($_POST['name']);
        $server_type = mysql_real_escape_string($_POST['type']);
        $description = mysql_real_escape_string($_POST['description']);
 
        if(!$username || !$password || !$server_type || !$description || !$name)
        {

        echo "Note: Descriptions allow HTML. Any abuse of this will result in an IP and account ban. No warnings!<br/>All forms are required to be filled out.<br><form action='create.php' method='POST'><table><tr><td>Username</td><td><input type='text' name='username'></td></tr><tr><td>Password</td><td><input type='password' name='password'></td></tr>";
        echo "<tr><td>Sever Name</td><td><input type='text' name='name' maxlength='35'></td></tr><tr><td>Type of Server</td><td><select name='type'>
       
        <option value='Any'>Any</option>
        <option value='PvP'>PvP</option>
        <option value='Creative'>Creative</option>
        <option value='Survival'>Survival</option>
        <option value='Roleplay'>RolePlay</option>
       
        </select></td></tr>
       
        <tr><td>Description</td><td><textarea maxlength='1500' rows='18' cols='40' name='description'></textarea></td></tr>";
        echo "<tr><td>Submit</td><td><input type='submit'></td></tr></table></form>";
        }
        elseif(strlen($password) < 8)
        {
        echo "Password needs to be higher than 8 characters!";
        }
        elseif(strlen($username) > 13)
        {
                echo "Username can't be greater than 13 characters!";
        }
        else
        {
                $check1 = mysql_query("SELECT username,name FROM servers WHERE username = '$username' OR name = '$name' LIMIT 1");
               
                if(mysql_num_rows($check1) < 0)
                {
                        echo "Sorry, there is already an account with this username and/or server name!";
                }
                else
                {
                        $ip = $_SERVER['REMOTE_ADDR'];

                        mysql_query("INSERT INTO servers (username, password, name, type, description, ip, votes, beta) VALUES ($username, $password, $name, $server_type, $description, $ip, 0, 1)");
                        echo "Server has been succesfully created!";
                }
        }
       
}
else
{
        echo "You are currently logged in!";
}
 
?>
</div>
</div>
 
<div style="clear: both;"> </div>
</div>
 
<div id="footer">
<a href="http://www.templatesold.com/" target="_blank">Website Templates</a> by <a href="http://www.free-css-templates.com/" target="_blank">Free CSS Templates</a> - Site Copyright MCTop
</div>
</div>
 
</body>
</html>

Here is my code:
// Start MySQL Query for Records
$query = "SELECT codes_update_no_join_1b" .
"SET orig_code_1 = new_code_1,
       orig_code_2 = new_code_2" .
"WHERE concat(orig_code_1, orig_code_2) = concat(old_code_1, old_code_2)";
$results = mysql_query($query) or die(mysql_error());
// End MySQL Query for Records


This query runs perfectly fine when run direct as SQL in phpMyAdmin, but throws this error when running in my script??? Why is this???

Code: [Select]
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '= new_code_1, orig_code_2 = new_code_2WHERE concat(orig_code_1, orig_c' at line 1

i was working on modifying a code written by a previous user.
i have field called adid in the ads table which should have been a primary key and autoincremented.
But since we already have lot of data across different sites we cannot modify the table structure.
The problem is i want to check if the following code is adding adid manually.is there some problem with this code?



Code: [Select]
   $get_ad_id = mysql_query("SELECT adid FROM ads ORDER BY adid DESC LIMIT 1", $con) or die("Error Getting AD ID: ".mysql_error());
    while($get_ad_id_results = mysql_fetch_assoc($get_ad_id)) { $adid=$get_ad_id_results['adid']; }
    if($adid!="") { $adid=$adid+1; }
    else { $adid="1"; }
    if($bannertype=="120x60" || $bannertype=="468x60")
     {
      $New_URL = $_POST['URL'];
      $active='Y';
      $insert_image_banner_query="INSERT INTO ads (adid, URL, image_path, date, userid, active, size) VALUES ('".$adid."','$New_URL', '$newname', '$Date', '$loggedinuserid','".$active."','".$bannertype."')";
      mysql_query($insert_image_banner_query, $con) or die("Inserting Image Ad Failed: ".mysql_error());
      $update_banner_cache="YES";
     }

Is it possible to manually edit a SESSION (not cookie) from client side? Sort of how a user can easily edit a cookie's value.

Can someone help me understand exactly how queries work in PHP?

Here is some code of mine...

// Build query.
$q2 = 'SELECT m.first_name, m.username, m.photo_name, m.photo_label, m.logged_in, m.last_activity,
c.created_on, c.body, c.status
FROM member AS m
INNER JOIN comment AS c
ON m.id = c.member_id
WHERE c.status="Approved" AND c.article_id=?
ORDER BY c.created_on';

// Prepare statement.
$stmt2 = mysqli_prepare($dbc, $q2);

// Bind variable to query.
mysqli_stmt_bind_param($stmt2, 'i', $articleID);

// Execute query.
mysqli_stmt_execute($stmt2);

// Store results.
mysqli_stmt_store_result($stmt2);

// Check # of Records Returned.
if (mysqli_stmt_num_rows($stmt2)>=1){
// Comment(s) Found.
$commentExists = TRUE;

// Bind result-set to variables.
mysqli_stmt_bind_result($stmt2, $firstName, $username, $photoName, $photoLabel, $loggedIn, $lastActivity,
$createdOn, $comments, $status);
}else{
// Comments Not Found.
$commentExists = FALSE;
}//End of FIND COMMENT RECORD



Questions:

1.) When I run/execute that query what happens?

Is the entire "Results Set" created?

2.) If so, where is it stored?

3.) What happens when I bind the results-set to variables?

Does that actually assign values to the variables or just create a "link"?

4.) What happens here...
while (mysqli_stmt_fetch($stmt2)){


Debbie

Another issue with trying to work on somebody else's script (and on no sleep!) I've got this mess of a page I'm trying to manipulate to add a feature to.

When somebody goes to this page, it pulls all records. At the top, I added a way to refine the results by dates. That query works fine, I tested it in mysql. To avoid fighting with the original code, I created an if statement to create $query_selectAll. But when I put it in the page, it would just refresh with the same data. I echoed the query to make sure it is correct. Then I realized that there was another query, $query_selectAllItems,  further down the page that was generating the results, and none of what I was doing made a difference. But I'm not sure why it's ignoring my query or how to work around this. I tried deleting the query $query_selectAllItems, thinking it would take mine, because it ends with the same: $result_all

$result_all = mysql_query($query_selectall);
or
$result_all = mysql_query($query_selectAllItems);



Code: [Select]
<?php
require_once('calendar/classes/tc_calendar.php');
include("include/auth.php"); 
include("include/conn.php"); 
@$a_row = mysql_fetch_array($result);
// I added this if statement in to get my POST results, without having to make changes to the GET results he made.
if (isset($_POST['view'])){

$view=$_POST['view'];
} else {
$view=$_GET['view'];
}


if ($view=="All") {
$query_selectall = 'select * from tbl_registration';
echo $query_selectall;
}
elseif ($view=="dated") {
$mydate = isset($_REQUEST["date5"]) ? $_REQUEST["date5"] : "";
$end_date = isset($_REQUEST["date6"]) ? $_REQUEST["date6"] : "";
$query_selectall = "SELECT * FROM tbl_registration WHERE reg_timestamped BETWEEN STR_TO_DATE('$mydate', '%Y-%m-%d')  AND STR_TO_DATE('$end_date' , '%Y-%m-%d')";
echo $query_selectall;
}

else {
$query_selectall = "select * from tbl_registration where category='$view'";

echo $query_selectall;
}

$result_all = mysql_query($query_selectall);
@$numRows_all = mysql_num_rows($result_all);

?>
<title>WYF Admin</title>

<html>
<head>
<script language="javascript" src="calendar/calendar.js"></script>
<link href="include/styles.css" rel="stylesheet" type="text/css">

<SCRIPT language="JavaScript">
<!--
function confirm_delete(idval)
{
var verify= confirm("Do you really want to delete this Registration?");
if (verify== true)
{
window.location="delete_registrations.php?action=delete&did=" + idval;
}
}
//-->
</SCRIPT>
<script type="text/javascript" src="js/jquery-latest.js"></script>
<script type="text/javascript" src="js/jquery.tablesorter.js"></script>
<script type="text/javascript">
$(function() {
$("table").tablesorter({debug: true});
});
</script>
</head>
<body leftmargin="0" rightmargin="0" bottommargin="0" topmargin="0" cellspacing="0" cellpadding="0" bgcolor="ffffff">
<table width="100%"><tr><td align="left"><img src="images/logo.jpg"></td></tr>
<tr><td><hr></td></tr>
</table>

<table><tr><td valign="top">

<table cellspacing="1" cellpadding="0" bgcolor="#cccccc" border="0" width="300">
<tr><td>
<table cellspacing="0" cellpadding="0" width="300" height="400" bgcolor="#ffffff" border="0">
<tr><td align="left" valign="top">

<table width="250"><tr><td valign="top">
<b>Welcome  </b><br><br>
<?php
//$query_selectAllItems = "SELECT *, DATE_FORMAT(workshop_date, '%e-%m-%Y') as 'my_date' FROM tbl_workshops"; 
$query_selectAllItems = "SELECT * FROM tbl_registration"; 
$result_all = mysql_query($query_selectAllItems);
$numRows_all = mysql_num_rows($result_all);
?>

<? include "include/nav.php"; ?>

</td></tr></table></center>
</td></tr>


<tr><td></td></tr></table></tr></td></table>
</td><td valign="top">
<div style="float:left;padding-right:40px;"><a href="getcsv.php">export to csv</a></div><div>
 <div style="float:right;margin-right:100px;"><form name="form1" method="post" action="viewregistrations2.php"><div style="float:left;overflow:visible;padding-right:10px;">View between</div>
<div style="float:left;overflow:visible;padding-right:10px;">
        <?php
  $myCalendar = new tc_calendar("date5", true, false);
  $myCalendar->setIcon("calendar/images/iconCalendar.gif");
  $myCalendar->setDate(date('d'), date('m'), date('Y'));
  $myCalendar->setPath("calendar/");
  $myCalendar->setYearInterval(2000, 2015);
  $myCalendar->dateAllow('2008-05-13', '2015-03-01');
  $myCalendar->setDateFormat('j F Y');
  $myCalendar->setAlignment('left', 'bottom');
  $myCalendar->setSpecificDate(array("2011-04-01", "2011-04-04", "2011-12-25"), 0, 'year');
  $myCalendar->setSpecificDate(array("2011-04-10", "2011-04-14"), 0, 'month');
  $myCalendar->setSpecificDate(array("2011-06-01"), 0, '');
  $myCalendar->writeScript();
  ?>
       </div>
<div style="float:left;overflow:visible;padding-right:10px;"> and </div>

 <div style="float:left;overflow:visible;padding-right:10px;">
        <?php
  $myCalendar = new tc_calendar("date6", true, false);
  $myCalendar->setIcon("calendar/images/iconCalendar.gif");
  $myCalendar->setDate(date('d'), date('m'), date('Y'));
  $myCalendar->setPath("calendar/");
  $myCalendar->setYearInterval(2000, 2015);
  $myCalendar->dateAllow('2008-05-13', '2015-03-01');
  $myCalendar->setDateFormat('j F Y');
  $myCalendar->setAlignment('left', 'bottom');
  $myCalendar->setSpecificDate(array("2011-04-01", "2011-04-04", "2011-12-25"), 0, 'year');
  $myCalendar->setSpecificDate(array("2011-04-10", "2011-04-14"), 0, 'month');
  $myCalendar->setSpecificDate(array("2011-06-01"), 0, '');
  $myCalendar->writeScript();
  ?>
      </div>
 <div style="float:left;overflow:visible;padding-right:10px;"><input type="hidden" name="view" id="view" value="dated"><input type="submit" value="go!">
 </div></form>


</div><br><br><br><br>
<table width="95%" border="1" cellpadding="3" cellspacing="1" bordercolor="#999999" id="rowspan" class="tablesorter" name="table"><thead>
  <tr bgcolor="#ffffff">
    <th width="125">Name</th>
<th width="125">Address</th>
        <th width="125">Phone</th>
<th width="125">Email</th>
<th width="125">Workshop</th>
<td width="50">&nbsp;</td>
    <td width="50">&nbsp;</td><td>&nbsp;</td>
    </tr></thead>
    <tbody>
  <? //output each row
  while ($c_row = mysql_fetch_array($result_all)){
    ?>
        <tr>
    <td><?= $c_row['reg_fname'] ?> <?= $c_row['reg_lname'] ?></td>
<td><?= $c_row['reg_address'] ?></td>
    <td><?= $c_row['reg_phone'] ?></td>
<td><?= $c_row['reg_email'] ?></td>
<td>
<?php
$catid = $c_row['reg_workshopid'];
$query="SELECT * FROM tbl_workshops where workshop_id = '$catid'";
//Run query;
$result=@mysql_query($query);

$row=mysql_fetch_array($result);
?>
<?php echo($row['workshop_title']); ?>

</td>
<td width="50" bgcolor="#DEE1EB"><div align="center"><a href="edit_registration.php?id=<? print $c_row['reg_id'] ?>">edit</a></div></td>
    <td width="50" bgcolor="#DEE1EB"><div align="center"><a href="javascript://" onClick="confirm_delete(<? print $c_row['reg_id'] ?>); return false">delete</a></div></td>
   
    <td width="50" bgcolor="#DEE1EB"><div align="center"><a href="printregistration.php?regid=<? print $c_row['reg_id'] ?>">view all / print</a></div></td>
  </tr>
  <?
  } //end while
  ?>
   </tbody>

</table><br><br>

</td></tr></table>

Hi   Been trying to run a query to get all rows from a table between two dates, but nothing seems to work.   $query = "SELECT * FROM table WHERE date BETWEEN '%2014-11-17%' AND '%2014-11-18%'";   Strange thing if I try a search instead a query in phpmyadmin I don't see an operator called 'BETWEEN' on the remote host, but I do on my localhost. Does this mean it will never work on the remote host? Nevertheless it doesn't work on either and I do have records for both dates in the table.   phpmyadmin: Version 4.1.14 localhost (wamp)
Version 3.3.7deb7 on remote server   Thanks

Hey,

$todo_upgrades_sql = "SELECT * FROM todo_upgrades WHERE time_completion >= $time";
$todo_upgrades_res = mysql_query($todo_upgrades_sql) or die (mysql_error()); results:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1

Hi guys can any one see hy tis won't work 

<?php 

require_once 'login.php';
$db_server = mysql_connect($db_hostname, $db_username, $db_password);

if (!$db_server)
{
  die ("Unabl to connect to MySQL" . mysql_error());
}

mysql_select_db($db_database, $db_server) or die("Unable to connect to database: " . mysql_error());

if (isset($_POST['author'])&& isset($_POST['title'])&& isset($_POST['category'])&& isset($_POST['year'])&& isset($_POST['isbn']))
{
$author  = get_post('author');
$title  = get_post('title');
$category  = get_post('category');
$year  = get_post('year');
$isbn  = get_post('isbn');

  if (isset($_POST['delete']) && $isbn != "")
  {
$query = "DELETE FROM tblCLassics WHERE isbn='$isbn'";

if (!mysql_query($query, $db_server))
{
  echo "DELETE failed: $query<br />" . mysql_error() . "<br /><br />";
}
  }
  else
  {
$query = "INSERT INTO tblClassics VALUES" .
"('$author','$title','$category','$year','$isbn')";

if (!mysql_query($query, $db_server))
{
  echo "INSERT Failed: $query<br />" .
  mysql_error() . "<br /><br />";
}
  }

}
echo <<<_END
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Welcome to the Book Club</title>
</head>

<body>
<form action="connectionTest.php" method="post"><pre>
Author: <input type="text" name="author" />
Title: <input type="text" name="title" />
Category: <input type="text" name="category" />
Year: <input type="text" name="year" />
ISBN: <input type="text" name="isbn" />
<input type="submit" value="ADD RECORD" /></pre>
</form>
_END;

$query = "SELECT * FROM tblClassics";
$results = mysql_query($query);

if (!$results)
{
die("Database access failed: " . mysql_error());  
}

$rows = mysql_num_rows($results);

for ($j = 0; $j < $rows ; ++$j)
{
$row = mysql_fetch_row($results);
echo <<<_END
<pre>
Author: $row[0]
Title: $row[1]
Category: $row[2]
Year: $row[3]
ISBN: $row[4]
</pre>
<form action="connectionTest.php" method="post">
<input type="hidden" name="delete" value="yes" />
<input type="hidden" name="isbn" value="$row[4]" />
<input type="submit" value="DELETE RECORD" />
</form>
_END;
}

echo "</body>";
echo "</html>";


mysql_close($db_server);

function get_post($var)
{
return mysql_real_escape_string($_POST[$var]);
}

?>
cheers.

This topic has been moved to MySQL Help.

http://www.phpfreaks.com/forums/index.php?topic=321864.0