PHP - Successful Update Throws Error?!

I have been pulling my hair out for the lasy 3 hours i am trying to update a MySql table but i cant get it too work, i just keep getting MySql error #1064 - You have an error in your SQL syntax; if i just update 1 field it works fine but if i try to update more than 1 field it dosent work, Help Please!


<?php
$root = $_SERVER['DOCUMENT_ROOT'];
require("$root/include/mysqldb.php");
require("$root/include/incpost.php");
$con = mysql_connect("$dbhost","$dbuser","$dbpass");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("$dbame", $con);


mysql_query("UPDATE Reg_Profile_p SET
build='$build'
col='$col'
size='$size'
WHERE uin = '$uinco'");
?>

I am new so please forgive me if my questions are very very simplistic in nature.

After my user logs in successfully, how can I have the new screen to display their name?  I capture their name in the code already.

Hi all me again thank god for sites like this

here is my prob

i have a page that edits then sends the info to a processing page to update the db but after i added a new bit i get a error

Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'order = '6', bi = '1', print = '1', online = '1', short_details = 'asdasda', ful' at line 1

im using get in my forms till its all working so i can see what is being passed to the processing page here is my code


the update page


<?
//Set no caching
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: post-check=0, pre-check=0", false);
header("Pragma: no-cache");
?>
<? include("protect/password_protect.php"); ?>
<?php
error_reporting(E_ALL);
include ("../includes/db_config.php");

mysql_connect($db_hostname,$db_username,$db_password);
@mysql_select_db($db_database) or die( "Unable to select database");
$query="SELECT * FROM `$db_table` WHERE `id` ='".$_GET['id']."'";

$result=mysql_query($query);

$num=mysql_num_rows($result);

mysql_close();


$i=0;
while ($i < $num) {

$id=mysql_result($result,$i,"id");
$order=mysql_result($result,$i,"order");
$pro_name=mysql_result($result,$i,"pro_name");
$short_details=mysql_result($result,$i,"short_details");
$full_details=mysql_result($result,$i,"full_details");
$bi=mysql_result($result,$i,"bi");
$print=mysql_result($result,$i,"print");
$online=mysql_result($result,$i,"online");


?>
<table width="515" height="315" >
<form name="form1" method="get" action="runupdate.php?id=<? echo"$id"?>">
  <tr>
    <th width="22%" scope="row"><p>Id</p></th>
    <td width="78%"><input class="udp" name="id" type="text" id="id" value="<? echo "$id"  ?>" size="3" maxlength="3" readonly="readonly"> Ordering:
 <select name="order">
 <option value="<? echo"$order"?>" selected>Is Now<? echo"$order"?></option>
    <option value="1">1</option>
    <option value="2">2</option>
    <option value="3">3</option>
    <option value="4">4</option>
    <option value="5">5</option>
    <option value="6">6</option>
    <option value="7">7</option>
    <option value="8">8</option>
    <option value="9">9</option>
    <option value="10">10</option>
  </select>
</td>
  </tr>
  <tr>
    <th scope="row"><p>Project Name</p></th>
    <td><input class="udp" name="pro_name" type="text" id="pro_name" value="<? echo "$pro_name"  ?>" size="40" MAXLENGTH="40"></td>
  </tr>
  <tr>
    <th scope="row"><p>Category</p></th>
    <td> Brand Identity:<input <?php if (!(strcmp("$bi",1))) {echo "checked=\"checked\"";} ?> name="bi" type="checkbox"  value="1" />
    Print:<input <?php if (!(strcmp("$print",1))) {echo "checked=\"checked\"";} ?> name="print" type="checkbox"  value="1" />
    Online:<input <?php if (!(strcmp("$online",1))) {echo "checked=\"checked\"";} ?> name="online" type="checkbox"  value="1" /></td>
  </tr>
  <tr>
    <th scope="row"><p>Short Details</p></th>
    <td><input class="udp" name="short_details" type="text" value="<? echo "$short_details"  ?>" size="50" MAXLENGTH="60"/></td>
  </tr>
  <tr>
    <th height="163" valign="top" scope="row"><p>Full Details</p></th>
    <td><textarea class="udp" name="full_details" cols="50" rows="10" id="full_details"><? echo "$full_details"?>
    </textarea>
      <input class="udp" type="submit" name="Update" id="Update" value="Update" /></td>
  </tr>
  <tr>
    <th scope="row">
    </form></th>
    </tr>
</table>
<? 
$i++;
}
?>


and this is the processing page
can any one help with the sql injection protection here please just an example will do thanks.



<?php
error_reporting(E_ALL);

include ("../includes/db_config.php");

$con = mysql_connect($db_hostname,$db_username,$db_password);
@mysql_select_db($db_database) or die( "Unable to select database");

$bi=mysql_result($result,$i,"bi");
$print=mysql_result($result,$i,"print");
$online=mysql_result($result,$i,"online");
$ud_pn=$_GET['pro_name'];
$ud_sd=$_GET['short_details'];
$ud_fd=$_GET['full_details'];
$ud_bi=$_GET['bi'];
$ud_print=$_GET['print'];
$ud_online=$_GET['online'];
$ud_order=$_GET['order'];


//// when i add order = '$ud_order' to the query it errors and i dont no why as it is layed out the same as pro_name and bi and print ect.

$query = "UPDATE $db_table SET pro_name = '$ud_pn', order = '$ud_order', bi = '$ud_bi', print = '$ud_print', online = '$ud_online', short_details = '$ud_sd', full_details = '$ud_fd' WHERE id = '".$_GET['id']."'";

if (!mysql_query($query,$con))
  {
  die('Error: ' . mysql_error());
  }
echo "$ud_pn record updated<p>With:<p>Short Details:<p>$ud_sd<p>Full Details:<p>$ud_fd<p>Category:<p>Brand Identity:$ud_bi</br>
Print:$ud_print</br>
Online:$ud_online</br><p>
Ordering:$ud_order</br> ";





mysql_close($con)

?>

Hello guys,
I have these lines of code
echo $_POST['uteamid'];
$iddquery1 = mysql_query("Select Driver_ID from Driver where Driver_Name='".$temp."'");
$result = mysql_fetch_assoc($iddquery1);
$idquery2 =mysql_query("Select Driver_ID from Driver where Driver_Name='".$_POST['DriverSubst']."'");
$resultidquery2 = mysql_fetch_assoc($idquery2);
$replaceid = $result['Driver_ID'];
echo $replaceid;
$updatequery2 = "Update Team_Driver SET Driver_ID = '".$resultidquery2['Driver_ID']."' where UTeam_ID='".$_POST['uteamid']."' and Driver_ID='".$replaceid."'";
echo $updatequery2;

Output of the query is:

5
1
Update Team_Driver SET Driver_ID = '2' where UTeam_ID='5' and Driver_ID=''
Why is that last Driver_ID = null?
wen it should be 1..and its echoing 1 right before that line.
Any help will be appreciated

Is there any visible error in my code?

Code: [Select]
if (isset($_POST['country'], $_POST['state'], $_POST['city']))
{
if ($_POST['state'] = '')
{
$details = $_POST['city'].', '.$_POST['country'];
update_user_location($details);
}
else
{
$details = $_POST['city'].', '.$_POST['state'];
update_user_location($details);
}
}

Code: [Select]
function update_user_location($details)
{
global $user_info;
$details = mres($details);

mysql_query("INSERT INTO `user_actions` (`user_id`, `action_id`, `time`, `details`) VALUES (${user_info['uid']}, 1, NOW(), {$details})");
}