PHP - Trouble Using <<< And Inserting Variables With No Spaces

I'm trying to create a script to use PDO prepared statements to enter data from a post form using functions to perform the PDO required statements.  But, it's not working.  When I execute it, it enters null in all the fields.

I'm hoping someone can tell me why this is not working.

I think the functions output what PDO is looking for.

I'm not sure how to do this otherwise without writing a lot of code like

$site_name= $_POST['site_name'];

and entering all of that in the PDO statments.  It seemed like it made sense to create the statements from the post array.

My code is included below and after that is some output I used to monitor what is going on that shows the output of the functions in the script.

Am I doing this all wrong.  Is another approach that I haven't discovered?

Thanks

--Kenoli

<?php

if(isset($_POST['submit'])){
    
    /** Establish DB connection.  Not real data, of course. */    
        
    $conn = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password);
      // set the PDO error mode to exception
      $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

    /** Remove empty $_POST elements. */
    
    $insert_array = array_filter($_POST);
        
    /** Whitelists input to identify columns to which changes are allowed */
 
    $whitelist = array('site_name' =>'', 'site_address' =>'', 'description' =>'', 'surface' =>'', 'tio_contact' =>'', 'site_contact' =>'', 'contact_phone' =>'', 'contact_email' =>'', 'contact_date' =>'', 'comments' =>'');
 
    $insert_array = array_intersect_key($insert_array,$whitelist);
    
    /************/
    
    /** Create query from $insert_array. */
  
  foreach($insert_array as $key => $value) {  
        $col .= $key . ', ';  
        $val .= ':' .$key . ', ';
    }
    
    /** Remove ', " from end of each array. */
    /* For use with update actions to prevent deleting data from fields that contain data. */
    
    $col = substr_replace($col ,"",-2);
    $val = substr_replace($val ,"",-2);
    
    $sql = "INSERT INTO Sites ($col) VALUES ($val)";
    
    /* The result is:  INSERT INTO Sites (site_name, site_address, description, contact_phone) VALUES (:site_name, :site_address, :description, :contact_phone)*/
    
    /************/
    
    /** Prepared statement functions */
    
    $stmt = $conn->prepare($sql);
    
    foreach($insert_array as $key => $value) {
        $param = ':' . $key;
        $stmt->bindParam($param, $$value);
        echo '$' . "stmt->bindParam($param, $$key)<br>"; // Monitor output
    }
    
    foreach($insert_array as $key => $value) {
        $$key = $value;
        echo "$$key = $value<br>";     // Monitor output
    }
    
    $stmt->execute();  // Execute insert


?>

The result with dummy data:

$insert_array

(
    [site_name] => asdfasdf
    [site_address] => Asdffads
    [description] => Asdfs
    [contact_phone] => Asdfsdaf
)
Here is the prepared statement:
INSERT INTO Sites (site_name, site_address, description, contact_phone) VALUES (:site_name, :site_address, :description, :contact_phone)

$stmt->bindParam(:site_name, $site_name)
$stmt->bindParam(:site_address, $site_address)
$stmt->bindParam(:description, $description)
$stmt->bindParam(:contact_phone, $contact_phone)

$site_name = asdfasdf
$site_address = Asdffads
$description = Asdfs
$contact_phone = Asdfsdaf

Everything looks right but  NULLs are inserted in all fields.

 

  $username = $_POST['uid'];
  $email = $_POST['mail'];
  $password = $_POST['pwd'];
  $passwordRepeat = $_POST['pwd-repeat'];
  $date = $_POST['date2'];
  $stream = $_POST['relationship'];

		$sql1 = "INSERT INTO users (uidUsers, emailUsers, pwdUsers, relationship) VALUES (?, ?, ?, ?);";
		$sql2 = "INSERT INTO Family1 (username, application_filed, relationship) VALUES (?, ?, ?);";
		$sql3 = "INSERT INTO Family2 (username, application_filed, relationship) VALUES (?, ?, ?);";
		mysqli_query($sql1, $conn);
		mysqli_query($sql2, $conn);
		mysqli_query($sql3, $conn);
		
   $stmt = mysqli_stmt_init($conn);
		if (!mysqli_stmt_prepare($stmt, $sql2)) {
          header("Location: ../signup.php?error=sqlerror");
          exit();
        }
		        else {

          mysqli_stmt_bind_param($stmt, "sss", $username, $date, $stream);
          $result = mysqli_stmt_get_result($stmt);
		  if ($row = mysqli_fetch_assoc($result))
		  ($username==$_SESSION['uid'] and $stream =='nursing');
			mysqli_stmt_execute($stmt);
		}
		
		if (!mysqli_stmt_prepare($stmt, $sql3)) {
          header("Location: ../signup.php?error=sqlerror");
          exit();
        }
		        else {

          mysqli_stmt_bind_param($stmt, "sss", $username, $date, $stream);
          $result = mysqli_stmt_get_result($stmt);
		  if ($row = mysqli_fetch_assoc($result))
		  ($username==$_SESSION['uid'] and $stream =='doctoral');
			mysqli_stmt_execute($stmt);
		}
		
        if (!mysqli_stmt_prepare($stmt, $sql1)) {
          header("Location: ../signup.php?error=sqlerror");
          exit();
        }

 if (!mysqli_stmt_prepare($stmt, $sql1)) {
          header("Location: ../signup.php?error=sqlerror");
          exit();
        }
        else {
          $hashedPwd = password_hash($password, PASSWORD_DEFAULT);
          mysqli_stmt_bind_param($stmt, "ssss", $username, $email, $hashedPwd, $stream);
          mysqli_stmt_execute($stmt);
          header("Location: ../signup.php?signup=success");
          exit();

I was wondering if someone could point me in the right direction. I have this code. They idea I had behind it is to insert values into different tables depending on variables being passed. 

So when user fills out a form and selects $stream="nursing" I want results to go to table 'users' and 'Family1', but not 'Family2' table. and if user selects $stream='doctoral' results should go to table 'users' and  'Family2', and not go to 'Family1'

But with my query I get results go to both table and also users table. And there is no restriction to what users selects, variable $stream being passed no matter what it is.

Is this the wrong way to go here? Did I completely mess up the logic?

Hello everyone,  I am having major issues trying to figure this one out.  So  here is the code....

$useranswer= ( $_POST["Text1"]);


$query  = "SELECT Answer FROM images_guess WHERE id=16";
$result = mysql_query($query);

while($row = mysql_fetch_array($result, MYSQL_ASSOC))
{
   echo "Answer :{$row["Answer"]} <br>";
 echo "User Answer:$useranswer <br>";
       
}
$result2 = $result. " ";
$useranswer2 = $useranswer . " ";

if ($result2==$useranswer2)
  echo "right";
else
  echo "wrong";
?>

Basically, I am taking whatever was put into "Text1"  and finding out if it matches what was in the Answer row in my table.  The two variables I used, $result and $useranswer are both working because they do print out on the next page.  The problem is the If/else statement is not working with them.  They are both text if that helps.  Any advice would help a ton, i'm at a loss.
Thanks!

Any idea why this wont work? Think it has something to with how i'm passing the variables?

$latinsk  =$row['latinsk'];
$ID  =$row['id'];            
//-display  the result of the array
echo  "<ul>\n";
echo  "<li>" . "<p style='font-family:verdana;font-size:150%;'><a href='javascript:void()' onclick='window.location.href='search.php?id= '" . $ID . "'&latinsk= '" . $latinsk . "''; parent.scrollTo(0,0); return false'> "   .$latinsk . " </a></li>\n</p>";
echo  "</ul>";

does anyone know how to decode this XML variable value into string values? I also need to know the oposite way: creating variable values into xml. I've tried several code examples but they did filter the requested data.

Code: [Select]
$xml='<?xml version="1.0" encoding="utf-8"?>
<elements>
<text identifier="ed9cdd4c-ae8b-4ecb-bca7-e12a5153bc02">
  <value/>
</text>
<textarea identifier="a77f06fc-1561-453c-a429-8dd05cdc29f5">
  <value><![CDATA[<p style="text-align: justify;">Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod tempor invidunt ut labore et dolore magna aliquyam erat, sed diam voluptua. At vero eos et accusam et justo duo dolores et ea rebum. Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet.</p>]]></value>
</textarea>
<textarea identifier="1a85a7a6-2aba-4480-925b-6b97d311ee6c">
  <value><![CDATA[<p style="text-align: justify;">Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy  eirmod tempor invidunt ut labore et dolore magna aliquyam erat, sed  diam voluptua. At vero eos et accusam et justo duo dolores et ea rebum.  Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor  sit amet.</p>]]></value>
</textarea>
<image identifier="ffcc1c50-8dbd-4115-b463-b43bdcd44a57">
  <file><![CDATA[images/stories/red/cars/autobedrijf.png]]></file>
  <title/>
  <link/>
  <target/>
  <rel/>
  <lightbox_image/>
  <width><![CDATA[250]]></width>
  <height><![CDATA[187]]></height>
</image>
<text identifier="4339a108-f907-4661-9aab-d6f3f00e736e">
  <value><![CDATA[Kramer 5]]></value>
</text>
<text identifier="ea0666d7-51e3-4e52-8617-25e3ad61f8b8">
  <value><![CDATA[6000 RS]]></value>
</text>
<text identifier="90a18889-884b-4d53-a302-4e6e4595efa0">
  <value><![CDATA[Eindhoven]]></value>
</text>
<text identifier="410d72e0-29b3-4a92-b7d7-f01e828b1586">
  <value><![CDATA[APK Pick up and return]]></value>
</text>
<text identifier="45b86f23-e656-4a81-bb8f-84e5ea76f71f">
  <value><![CDATA[15% korting op grote beurt]]></value>
</text>
<text identifier="3dbbe1c6-15d6-4375-9f2f-f0e7287e29f3">
  <value><![CDATA[Gratis opslag zomerbanden]]></value>
</text>
<text identifier="2e878db0-605d-4d58-9806-8e75bced67a4">
  <value><![CDATA[Gratis abonnement of grote beurt]]></value>
</text>
<text identifier="94e3e08f-e008-487b-9cbd-25d108a9705e">
  <value/>
</text>
<text identifier="73e74b73-f509-4de7-91cf-e919d14bdb0b">
  <value/>
</text>
<text identifier="b870164b-fe78-45b0-b840-8ebceb9b9cb6">
  <value><![CDATA[040 123 45 67]]></value>
</text>
<text identifier="8a91aab2-7862-4a04-bd28-07f1ff4acce5">
  <value/>
</text>
<email identifier="3f15b5e4-0dea-4114-a870-1106b85248de">
  <value/>
  <text/>
  <subject/>
  <body/>
</email>
<link identifier="0b3d983e-b2fa-4728-afa0-a0b640fa34dc">
  <value/>
  <text/>
  <target/>
  <custom_title/>
  <rel/>
</link>
<relateditems identifier="7056f1d2-5253-40b6-8efd-d289b10a8c69"/>
<rating identifier="cf6dd846-5774-47aa-8ca7-c1623c06e130">
  <votes><![CDATA[1]]></votes>
  <value><![CDATA[1.0000]]></value>
</rating>
<googlemaps identifier="160bd40a-3e0e-48de-b6cd-56cdcc9db892">
  <location><![CDATA[50.895711,5.955427]]></location>
</googlemaps>
</elements>';

echo $first$last;

how would i add a space it comes out like this

JoeJackson
i want it like this Joe Jackson

This doesn't work:
Code: [Select]
<style type="text/css" media="all">@import url(style/'.$skin.'.css);</style>
$skin is = "Sky Blue";



If $skin is = "Sky Blue";

this works:
Code: [Select]
<link rel="stylesheet" type="text/css" href="style/Sky Blue.css">
It's because @IMPORTURL, Is there a php function that wraps a &20 for a space so it works on my $skin?

I made a form, like guestbook, and i dont wonna to write in mysql if in comment is just 1 or more spaces, no letters or numbers or chars, just space, how can i fix that?

ok so when my code dipsplays i get the spaces i add in the db but when i updae it dispalys this rnrnrn and its all together
Code
Code: [Select]
<?php
include "scripts/connect.php";

if(isset($_GET['edit'])){

$newid = $_GET['edit'];

$query = mysql_query("SELECT * FROM news WHERE id='$newid' LIMIT 1");
$rows = mysql_fetch_array($query);

$newstitle = $rows['title'];
$newsby = $rows['by'];
$newsbody = $rows['body'];

}

if(isset($_POST['saveedit'])){

$newid = mysql_real_escape_string($_POST['saveedit']);
$newstitle = mysql_real_escape_string($_POST['title']);
$newsby  = mysql_real_escape_string($_POST['by']);
$newsbody = mysql_real_escape_string($_POST['body']);

if ($newstitle && $newsby && $newsbody){

$query = mysql_query("UPDATE news SET title='$newstitle', 'by'='$newsby', body='$newsbody' WHERE id='$newid'") or die(mysql_error());

echo "UPDATE SUCCESFULLY!";

}else
   $msg = "<font color=red>YOU DID NOT FILL ALL OF THEM IN!</font>";
}
?>
<form action='enews.php' method='POST'>
<table>
<tr>
<td></td>
<td><?php echo "$msg"; ?></td>
</tr>
<tr>
<td>Article Title</td>
<td><input type='text' name='title' size='45' value='<?php echo $newstitle; ?>'/></td>
</tr>
<tr>
<td>By:</td>
<td><input type='text' name='by' size='30' value='<?php echo $newsby; ?>' /></td>
</tr>
<tr>
<td>Article Body</td>
<td><textarea cols='45' rows='25' name='body'><?php echo  stripslashes($newsbody); ?></textarea></td>
</tr>
<tr>
<td><input type='hidden' name='saveedit' value='<?php echo $newid; ?>'/></td>
<td><input type='submit' name='updatebtn' value='Update' /></td>
</tr>
</table>
</form>
</div>

How can I block a text that contains only spaces?
Right now I have done

if ($body == "") {
die("<font color='red'><font size='15'><strong><center>Your post did not contain any text!");
}

But that's extremely insufficient, as any user can easily post "         "
Any ideas?

I have a form which has a drop down menu select box, which retrives the makes of cars from a database, which once clicked submit will go to another page post that info. Then a if statment says if the variable that has been posted == a certain word that matches the one in the database then display content. However, my issue is when I have a car make such as "Land Rover" saved in the database as typed it just comes back with the final else statement.

In the 1st section I have included the form which is posting the information across and in the second I have the if statement. Any ideas of how to get around / make this work?

[
<form method="post" action="details.php" enctype="multipart/form-data">
                              <table class="search_nav">
                                 <tr>
                                    <td>
                                       <select name="manufacture" id="manufacture">
                                          <option value=" " selected="selected">Car Manufactures&nbsp;&nbsp;</option>
                                          ';
                                          $query = "SELECT DISTINCT make FROM cars ORDER BY make ASC";
                                          $result = mysql_query($query) or die ("Error in query: $query. ".mysql_error());                                             
                                          while ($row = @ mysql_fetch_array($result))
                                          {
                                              print '
                                                    <option value='.$row["make"].'>'.$row["make"].'</option>
                                                   ';
                                          }
                                       print '
                                    </select>
                                  </td>
                              </tr>
                              <tr>   
                                 <td colspan="2">
                                    <input type="image" src="images/go.gif" alt="Go" name="submit" id="submit" value="Submit"/>
                                 </td>
                              </tr>
                           </table>
                           </form>
]

[

if ($manufactures == "Land Rover")
               {
echo "test";

}
]

Hi,
I am trying to parse a html page, but i get a lot of empty spaces, please any idea how can i remove spaces, here is my text:
Code: [Select]
         
       
         
this          goes here

 

   
   
     








one line here

 







some other line here










see there is a lot of space between text,

thanks for any help

I'm looking for a function that will check a string for letters and spaces...boolean preferibly

Code: [Select]
Address: 351 Hougang Ave 3 (769057)
Contact No: 6752 5513
Operating Hours: 8.00am - 9.30pm (Thursday to Tuesday & Public Holidays)
Background: Opened to the public on 30 Mar 88
Hi good day, if I paste the above address into one of the mysql field, I found out that I cannot fetch it using php. It give me a blank page.

Code: [Select]
Address: 351 Hougang Ave 3 (769057) Contact No: 6752 5513 Operating Hours: 8.00am - 9.30pm (Thursday to Tuesday & Public Holidays) Background: Opened to the public on 30 Mar 88

When I sort it together then i can see mysql working, very strange.. Can anyone help?

I am trying to use CURL on a site., to send SMS/TXT messages.

HERE IS THE CODE

Code: [Select]
$name = $_POST['name']; 
$emsg = $_POST['emsg'];

           $ch = curl_init("https://www.smsfun.com.au/api/login.php?mobile=emma&password=123456&send_to=$name&message=$emsg&send=1");
        curl_setopt($ch, CURLOPT_HEADER, 0);
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        $output = curl_exec($ch);       
        curl_close($ch);


Then i use my form like this

Code: [Select]
<form method="post" action="" value "">
  <p align="center"><strong><font color="#0000FF" size="5" face="Courier New, Courier, mono">MOBILE
    NO<br>
    <input name="name" type="text">
    </font></strong></p>
  <p align="center"><strong><font color="#0000FF" size="5" face="Courier New, Courier, mono">message</font><font color="#0000FF" size="5" face="Courier New, Courier, mono"><br>
    <textarea name="emsg" value "$emsg" rows="5" wrap="VIRTUAL"></textarea>
    </font></strong><br>
    <input type="submit" name="submit" value="SEND">
  </p>
</form>

This all works fine but if the user needs to put a space after a word i.e  "hello this is a test" this wont work only "hellothisisatest" will.

Am i missing somtink here? I tryed googleing etc cannot find the answer.

Please help

Thanks

g-netUK