PHP - Updating A Field To A Blank

I have a form that allows my client to update some products. Now the products are simple just basic info and 1 picture.

I have set this up so they can edit the products and change the information, having done this many times in the past, but now hit a puzzling block that I am baffled.

The client when editing is presented with the form with the information pulled from the database and the form fields loaded with that data ready to edit.

The image can either be left alone or they can choose to upload a new image. They are shown the image they currently have stored in the database.

The problem I have is EVEN if they decide not to upload an image and change other information, when the submit the form it must be sending a blank value for the image somewhere as it is updating the database and removing the image reference as if it has been removed.

I have an if/else statement based on the form to perform 2 different queries for the update in mysql.

Here is the code for the form update, as you can see the image should not update?? Please help??


 if ($_SERVER['REQUEST_METHOD'] =='POST') {

//This stops SQL Injection in POST vars 
 foreach ($_POST as $key => $value) { 
  $_POST[$key] = mysql_real_escape_string($value); 
 }

// **************************** THIS IS FOR NO NEW IMAGE ********************************
 
 if ($_SERVER['REQUEST_METHOD'] =='POST' && empty($_FILES['product_image']['name'])) {

   # setup SQL statement for no new image
  $SQL = " UPDATE products SET product_title = '{$_POST['product_title']}', product_description = '{$_POST['product_description']}', standard_price = '{$_POST['standard_price']}', deluxe_price = '{$_POST['deluxe_price']}' WHERE product_id = '{$_REQUEST['product_id']}' ";
}

// **************************** THIS IS FOR A NEW IMAGE ********************************

 else {

// Check the image type is a jpeg or gif for the image.
 if (($_FILES['product_image']['type'] != "image/gif") && ($_FILES['product_image']['type'] != "image/jpeg") && ($_FILES['product_image']['type'] != "image/pjpeg")) {
  echo "<FONT FACE=\"Verdana\"><SPAN CLASS=\"content\">You have chosen not to upload a <b>Product Image</b>.<BR></SPAN>" ;
 } elseif ($_FILES['product_image']['size'] > 100000) {
  echo "<FONT FACE=\"Verdana\"><SPAN CLASS=\"content\">The file size is bigger than 300kb.<BR></SPAN>" ;
 } else {
  move_uploaded_file($_FILES['product_image']['tmp_name'], "/httpdocs/product_images/".$_FILES['product_image']['name']) ;
 echo "<FONT FACE=\"Verdana\"><SPAN CLASS=\"content\"><B>Your front image has successfully uploaded.</B><BR></SPAN>" ;
  }
}

  # setup SQL statement for update
  $SQL = " UPDATE products SET product_title = '{$_POST['product_title']}', product_description = '{$_POST['product_description']}', standard_price = '{$_POST['standard_price']}', deluxe_price = '{$_POST['deluxe_price']}', product_image = '{$_FILES['product_image']['name']}' WHERE product_id = '{$_REQUEST['product_id']}' ";
}
  
  #execute SQL statement
  $result = mysql_db_query( *****,"$SQL",$connection );

  # check for error
  if (!$result) { echo("ERROR: " . mysql_error() . "\n$SQL\n");    }

Hi:
I'm going crazy trying to do the following:
I'm making a job registration process where the user registers on one php page to the website, must acknowlege and email receipt using an activate php page, then is directed to upload their C.V. (resume) based on the email address they enter in the active page output. I then run an upload page to store the resume in teh MySQL db based on the users email address in the same record.

If I isolate the process of the user registering to the db, it works perfectly.
If I isolate the file upload process into the db, it works perfect.
I simply cannot upload teh file to the existing record based on teh email form field matching the user_email field in the db.
With the processes together, teh user is activated, but teh file is not uploaded.

Maybe I've simply been at this too long today, but am compeled to get through it by end day.
If anyone can help sugest a better way or help me fix this, I will soo greatly appreciate it.

My code is as follows for the 2 pages.

---------activate.php-------
<?php
session_start();
include ('reg_dbc.php');
if (!isset($_GET['usr']) && !isset($_GET['code']) )
{
$msg = "ERROR: The code does not match..";
exit();
}
$rsCode = mysql_query("SELECT activation_code from subscribers where user_email='$_GET[usr]'") or die(mysql_error());
list($acode) = mysql_fetch_array($rsCode);
if ($_GET['code'] == $acode)
{
mysql_query("update subscribers set user_activated=1 where user_email='$_GET[usr]'") or die(mysql_error());
echo "<h3><center>Thank You! This is step 2 of 3. </h3>Your email is confirmed. Please upload your C.V. now to complete step 3.</center>";
} else
{ echo "ERROR: Incorrect activation code... not valid"; }

?>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">

<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type" />
<title>Job application activation</title>
</head>
<body>
<center>
<br/><br/><br/>
<p align="center">
        <form name="form1" method="post" action="upload.php" style="padding:5px;">
        <p>Re-enter you Email : <input name="email" type="text" id="email"/></p></form>
          <form enctype="multipart/form-data" action="upload.php" method="POST">
          <input type="hidden" name="MAX_FILE_SIZE" value="4000000">
          Upload your C.V.: <input name="userfile" type="file" id="userfile">
          <input name="upload" type="submit" id="upload" value="Upload your C.V."/></form>
</p>
</center>
</body>

</html>
--------upload.php----------
<?php
session_start();
if (!isset($_GET['usr']) && !isset($_GET['code']) )
{
$msg = "ERROR: The code does not match..";
exit();
}
if(isset($_POST['upload']) && $_FILES['userfile']['size'] > 0)
{
$fileName = $_FILES['userfile']['name'];
$tmpName  = $_FILES['userfile']['tmp_name'];
$fileSize = $_FILES['userfile']['size'];
$fileType = $_FILES['userfile']['type'];
$email = $_POST['email']['user_email'];

$fp      = fopen($tmpName, 'r');
$content = fread($fp, filesize($tmpName));
$content = addslashes($content);
fclose($fp);

if(!get_magic_quotes_gpc())
{
    $fileName = addslashes($fileName);
}

include 'reg_dbc.php';

$query = "UPDATE subscribers WHERE $email = user_email (name, size, type, content ) ". "VALUES ('$fileName', '$fileSize', '$fileType', '$content')";

mysql_query($query) or die('Error, query failed');
mysql_close($dbname);
}
?>
<center>
<br/>
<br/>
<br/>
<br/>
Thank you for uploading your <?php echo "$fileName"; ?> file, completing your registration, and providing us your C.V. for this position.
<br/>
<br/>
<br/>
We will contact you if your canditature qualifies.
</center>

Hey guys, I have a private message script but for some reason when its updating, it turns the value into a blank one from 1 to 3.

I have no idea why, but it works with the old statement of deleting, but I changed it to instead update it to 3 because I want to keep the pm in archives.

here is the delete PM part.

<?php
session_start();
header("Location:inbox.php");

$user = $_SESSION['username'];

include 'db.php';

//We do not have a user check on this page, because it seems silly to, you just send data to this page then it directs you right back to inbox

//We need to get the total number of private messages the user has
$sql = mysql_query ("SELECT pm_count FROM users WHERE username='$user'");
$row = mysql_fetch_array ($sql);
$pm_count = $row['pm_count'];
            
//A foreach loop for each pm in the array, get the values and set it as $pm_id because they were the ones selected for deletion
foreach($_POST['pms'] as $num => $pm_id)
    {
    //Delete the PM from the database
     mysql_query("UPDATE messages SET recieved='3' WHERE id='$pm_id' AND reciever='$user'");

    // mysql_query("DELETE FROM messages WHERE id='$pm_id' AND reciever='$user'");
    
    //Subtract a private message from the counter! YAY!
    //$pm_count = $pm_count - '1';
    
    //Now update the users message count with the new value
    //mysql_query("UPDATE users SET pm_count='$pm_count' WHERE username='$user'");
    }
?> 

The commented out part at the end, is the old deleting parts but instead changed it to update value.

Here is my form that shows checkboxes.
I showed the whole code, where it has comments.

<?php
    //This stuff and the while loop will query the database, see if you have messages or not, and display them if you do
    $query = "SELECT id, sender, subject, message FROM messages WHERE reciever='$user' AND recieved='1'";
    $sqlinbox = mysql_query($query);

    
    //We have a mysql error, we should probably let somone know about the error, so we should print the error
    if(!$sqlinbox)
        {
        ?>
        <p><?php print '$query: '.$query.mysql_error();?></p>
        <?php
        }
    
    //There are no rows found for the user that is logged in, so that either means they have no messages or something broke, lets assume them they have no messages
    elseif (!mysql_num_rows($sqlinbox) )
        {
        ?>
        <center><p><b>You havent read any messages</b></p></center>
        <?php
        }
    
    //There are no errors, and they do have messages, lets query the database and get the information after we make a table to put the information into
    else
        {
        //Ok, Lets center this whole table Im going to make just because I like it like that
        //Then we create a table 80% the total width, with 3 columns, The subject is 75% of the whole table, the sender is 120 pixels (should be plenty) and the select checkboxes only get 25 pixels
        ?>
        <center>
        <form name="send" method="post" action="delete.php">
        <table width="80%">
        <tr>
          <td width="75%" valign="top"><p><b><u>Subject</u></b></p></td>
          <td width="120px" valign="top"><p><b><u>Sender</u></b></p></td>  
          <td width="25px" valign="top"><p><b><u>Select</u></b></p></td>
        </tr>
        <?php
        //Since everything is good so far and we earlier did a query to get all the message information we need to display the information. 
        //This while loop goes through the array outputting all of the message information
        while($inbox = mysql_fetch_array($sqlinbox))
            {
            //These are the variables we get from the array as it is going through the messages, we have the id of the private message, we have the person who sent the message, we have the subject of the message, and yeah thats it
            $pm_id = $inbox['id'];
            $sender = $inbox['sender'];
            $subject = $inbox['subject'];
            
            //So lets show the subject and make that a link to the view message page, we will send the message id through the URL to the view message page so the message can be displayed
            //And also let the person see who sent it to them, if you want you can make that some sort of a link to view more stuff about the user, but Im not doing that here, I did it for my game though, similar to the viewmsg.php page but a different page, and with the senders id
            //And finally the checkboxes that are all stuck into an array and if they are selected we stick the private message id into the array
            //I will only let my users have a maximum of 50 messages, remeber that ok? Because that's the value I will later in another page
            //Here is finally the html output for the message data, the while loop keeps going untill it runs out of messages
            ?>
            <tr>
              <td width="75%" valign="top"><p><a href="viewmsg.php?msg_id=<?php echo $pm_id; ?>"><?php echo $subject; ?></a></p></td>
              <td width="120px" valign="top"><p><?php echo $sender; ?></p></td>
              <td width="25px" valign="top"><input name="pms[]" type="checkbox" value="<?php echo $pm_id; ?>"></td>
            </tr>
            <?php
            //This ends the while loop
            }
        //Here is a submit button for the form that sends the delete page the message ids in an array
        ?>
        
        
        <tr>  
    
        <td colspan="3"><input type="submit" name="Submit" value="Delete Selected"></td>
        <td></td>
        <td></td>
        
        
        
        
        </tr>
        
        
        
        
        </table>
        
        </center>
        <?php
        //So this ends the else to see if it is all ok and having messages or not
        }
?>


So yeah, does anyone know why it updates it to a blank value, from the value 1 in recieved?

Hello there. I have a small form the inputs a new message into the column 'status'. But when I insert the new text, it deletes whatever is already in the column and leaves it blank. It will never add the new text to the column.

Here is the form:

$status_sql=mysql_query("SELECT status FROM global");
  $status_data=mysql_fetch_assoc($status_sql);
  echo '<br /><br />Current Status Message: '.$status_data['status'].'<br />';
  echo '<form name="status" method="post" action="?page=panel&action=sdo"><input type="text" class="console" name="status">&nbsp;<input type="submit" class="cbutton" value="Enter"></form>';



$status = mysql_real_escape_string($_POST['status']);
  $update=mysql_query("UPDATE global SET status='$status' WHERE id='1'") or die('Query: ' . $update . '<br />Failed with: ' . mysql_error());  
  echo '<br />Status changed to: '.$status.'';


If you need more info, just let me know.

Thank you a million!

Hey,

im trying to fix a line of code that should update a field in the database when filled in. The code i think handles this is below.

<input type="text" id="uuser_address" name="uuser_address" value="<?php echo("$slide[address]"); ?>"><br /><input type="text" id="uuser_town" name="uuser_town" value="<?php echo("$slide[town]"); ?>"><br /><input type="text" id="uuser_county" name="uuser_county" value="<?php echo("$slide[county]"); ?>"><br /><input type="text" id="uuser_postcode" name="uuser_postcode" value="<?php echo("$slide[postcode]"); ?>"></div>


can anyone tell me why this is updating all the address fields other than the postcode?

thanks,
gavin