PHP - Php Form Insert Mysql

Hi Folks,   Firstly I am new, I have read several topics here and learned a lot, I would class myself as 'slightly better than basic', but my knowledge is mostly gained from reading code.   I am making a simple POST form for work, the data gets inserted into MySQL, nice and easy, I can make it work if I write out the statement completely, BUT I need to make a new form, it will have HUNDREDS of input fields, I really don't want to write the code, and I figured programmatically is a good way to go anyway as forms change and new forms may be required,  so I set about building a function to completely handle my post data, bind it to a statement and insert it into a table, I have scrapped it a half dozen times already because something fundamentally doesn't work, but I am very close! The function can write the statement, but I need to bind the POST values before I can insert, something going wrong here and I would appreciate some help, I have a feeling it's a problem with an array, but anyway I will show you what I have, give you some comments as to my reasoning, and hopefully you can help me with the last bit

	public function getColumnNames($table){
		$sql = "SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE table_name = :table";
		try {
			$stmt = $this->dbh->prepare($sql);
			$stmt->bindValue(':table', $table, PDO::PARAM_STR);
			$stmt->execute();
			$output = array();
				while($row = $stmt->fetch(PDO::FETCH_ASSOC)){
				$output[] = $row['COLUMN_NAME'];                
			}
			
			$all = array($output);
			
			$a1 = array_slice($output, 1); // I don't want column 1, it contains the ID, its auto incremented.
			$a2 = array_slice($a1, 0, -3); // I don't want the last 3 columns as they have default values
			
			$selected = array($a2);  // contains all the columns except those excluded by array_slice, columns now match all of the input fields on the form
			
			foreach ($selected as $row){
					$fields = "`" . implode('`, `', $row) . "`"; // I'm making `fields` here,
					$bind = ":" . implode(', :', $row);	// And making :values here			
					}	
			return array (
					"raw" 	        => $all,
					"fields" 	=> $fields,
					"bind"		=> $bind
				     );
			}
			catch(PDOException $pe) {
			    trigger_error('Could not connect to MySQL database. ' . $pe->getMessage() , E_USER_ERROR);
			}
	}
	
	public function addRecord(){
		$col = array();
		$col = $this->getColumnNames("table");
		$raw = array($col['raw']);
		$fields = array($col['fields']);
		$bind = array($col['bind']);
		$columnList = implode('`, `', $fields);
		$paramList = implode(', ', $bind); 
		
		$sql = "INSERT INTO `{$this->dbtable}` ($columnList) VALUES ($paramList)";
		
		return $sql; // this returns something like:
INSERT INTO `table` (`field1`, `field2`, `field3`) VALUES (:field1, :field2, :field3)";

perfect I thought, now I just need to bind the values from $_POST... then I get stuck.
Edited by luke3, 08 January 2015 - 12:10 PM.

Can anyone tell me why this is not INSERTing? My array data is coming out just fine.. I've tried everything I can think of and cannot get anything to insert.. Ahhhh!

<?php
  $query = "SELECT RegionID, City FROM geo_cities WHERE RegionID='135'";
  $results = mysqli_query($cxn, $query);
  $row_cnt = mysqli_num_rows($results);
  echo $row_cnt . " Total Records in Query.<br /><br />";
  if (mysqli_num_rows($results)) {
      while ($row = mysqli_fetch_array($results)) {
          $insert_city_query = "INSERT INTO all_illinois SET state_id=$row[RegionID], city_name=$row[City] WHERE id = null" or mysqli_error();
          $insert = mysqli_query($cxn, $insert_city_query);
          if (!$insert) {
              echo "INSERT is NOT working!";
              exit();
          }
          
          echo $row['City'] . "<br />";
          
          echo "<pre>";
          echo print_r($row);
          echo "</pre>";
      }
      //while ($rows = mysqli_fetch_array($results))
      
      } //if (mysqli_num_rows($results))
      
      else {
          echo "No results to get!";
      }
?>

Here is my all_illinois INSERT table structu

CREATE TABLE IF NOT EXISTS `all_illinois` (
  `state_id` varchar(255) NOT NULL,
  `city_name` varchar(255) NOT NULL
) ENGINE=MyISAM DEFAULT CHARSET=latin1;

Here is my source table geo_cities structu

CREATE TABLE IF NOT EXISTS `1` (
  `CityId` varchar(255) NOT NULL,
  `CountryID` varchar(255) NOT NULL,
  `RegionID` varchar(255) NOT NULL,
  `City` varchar(255) NOT NULL,
  `Latitude` varchar(255) NOT NULL,
  `Longitude` varchar(255) NOT NULL,
  `TimeZone` varchar(255) NOT NULL,
  `DmaId` varchar(255) NOT NULL,
  `Code` varchar(255) NOT NULL
) ENGINE=MyISAM DEFAULT CHARSET=latin1;

Hello, I'm having a bit of a problem here, all help to this issues would be much appreciated

I am trying to use text boxes to insert numbers into the database based on what is inputed.
If I have a string, like this for example:
$variable = 09385493;

And I want to insert it into the database like this:
mysql_query("INSERT INTO integers(number)
VALUES ('$variable')");

When checking the integers table in my database, looking at the number field, the $variable that was inserted is outputted as
9385493

Notice the number zero was taken out of the front of the number. If the number is double 0's (009385493), both of those zero's would disappear, too.

Thanks

I have this code: <?php
$con = mysql_connect("localhost","hhh","hhh");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("hhh", $con);

// --------------------
// Avatar insert check
// --------------------

session_start();

$name = $_POST[name];
$group = $_POST[group];
$age = $_POST[age];
$usernameid = $_SESSION[id];

$result = mysql_query("SELECT * FROM avatars WHERE name='$_POST[name]'");

$num = mysql_numrows($result);

if ($num == 0) {
mysql_query("INSERT INTO avatars (id, usernameid, name, group, age, xp)
VALUES ('', '$usernameid', '$name', '$group', '$age', '0')");

header( 'Location: me/' ) ;
}
else echo 'Sorry, please pick a new name';
?> And it does everything but put the data into the datebase. If I add a session befor and after '$request' they both run, but the sql doesn't. No error returns, if just redirects to the other page. Any help?

I don't understand where the empty value is. I've substituted the variables for text and still have the same problem.

Code:
Code: [Select]
$sql = "INSERT INTO courses (course#, name, subject, semester, ap)VALUES('$courseNum', '$courseName', '$subject', '$semester', '$ap')";
Error:
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1

Hi guys

I have a registration form working fine, my database is as below:

userid
username
email
password
repeatpassword


I have added another column which is "name", users can update their profile once they have logged in so I have created updateprofile.php and when I login-->go to update profile and insert my name nothing adds to mysql name column

this is my code below:

<?php

include ("global.php");


//username session
$_SESSION['username']=='$username';
$username=$_SESSION['username'];

//welcome messaage
echo "Welcome, " .$_SESSION['username']."!<p>";

  if ($_POST['register'])
    {
     //get form data
     $name = addslashes(strip_tags($_POST['name']));

$update = mysql_query("INSERT INTO users (name) VALUES ('$_POST[name]') WHERE username='$username'");
   
}

?>

    <form action='updateprofile.php' method='POST'>
    Company Name:<br />
    <input type='text' name='name'><p />
 
    <input type='submit' name='register' value='Register'>
    </form>


can you please tell me where in this code is wrong? Im new in php so please excuse me if I have silly mistakes.

thanks in advance
 

well this is truely embarrising...i have a insert statement which works within phpmyadmin but when using mysqli_query it returns a error.

INSERT INTO users (username, timestamp) VALUES ('test', UTC_TIMESTAMP())

  Unknown column 'timestamp' in 'field list'   i've been playing about with this for a few hours now ...tried changing the column name (timestamp), adding ` around column names as well as table name.   the column exists which is the strangest part, and ive even checked there is no space after the column name in the db.   whats going on please?  

I need help badly!

What I want to do is insert into database the value from the selected radio group buttons.. All of them. There are 10 radio groups total (they can be less, but not more).

Thanks!
Code: [Select]
<?php
   require_once('Connections/strana.php'); 
 mysql_select_db($database_strana, $strana);
 
 ?>
<link href="css/styles.css" rel="stylesheet" type="text/css" />

<table width="100%" height="100%" style="margin-left:auto;margin-right:auto;" border="0">
<tr>
<td align="center">
<form action="" method="post" enctype="multipart/form-data" name="form1">
<table>
<?php
$tema = mysql_query("SELECT * from prasanja where tip=2")or die(mysql_error());

function odgovor1($string)
{
$string1 = explode("/", $string);
echo $string1[0];
}
function odgovor2($string)
{
$string1 = explode("/", $string);
echo $string1[1];
}


while ($row=mysql_fetch_array($tema))
{
$id=$row['prasanje_id'];
$prasanje=$row['prasanje_tekst'];
$tekst=$row['odgovor'];
?>
    <tr>
    <td>
    </td>
    </tr>
    <tr>
    <td class="formaP">
 <?php echo $prasanje?>
   </td>
   </tr>
   <tr>
   <td class="formaO">
      <p>
        <label>
          <input type="radio" name="Group<?php echo $id?>" value="<?php odgovor1($tekst) ?>"  />
          <?php odgovor1($tekst) ?></label>
        <br />
        <label>
          <input type="radio" name="Group<?php echo $id?>" value="<?php odgovor2($tekst) ?>" />
          <?php odgovor2($tekst) ?></label>
        <br />
      </p></td>
</tr>
<tr>
<td>
<br />

</td>
</tr>
<?php 




}
?>
</table>
<input align="left"type="submit" name="submit"
value="Внеси" >
</form>
</td>
</tr>
</table>
prasanje = question
tekst/odgovor = answer

The answer table:
id - primary
question_id - the questions ID whose answer is selected in the radio group
user_id - cookie takes care of this
answer - the value from radio group
date - automatic

I'm trying to insert array of posts categories into MySQL. I'm getting category IDs from drop down list..

ERR: Notice: Notice: Array to string conversion in C:\laragon\*********\includes\functions.php on line 477

 

Array

Array
(
    [0] => Array
        (
            [0] => 4
            [1] => 5
        )

)

 

PHP

try {
        $sql = "INSERT INTO posts_category_ids (post_id, category_id) VALUES";

        $insertQuery = array();
        $insertData = array();
        foreach ($filter_category as $row) {
            $insertQuery[] = '(?, ?)';
            $insertData[] = $id;
            $insertData[] = $row;
        }

        if (!empty($insertQuery)) {
            $stmt = $this->conn->prepare($sql);
            $stmt->execute($insertData); //477
        }


         }catch (Exception $e){

            echo $e->getMessage();
}
}

 

Hello every body,, i want to create a new database (auto generate duty assigned using form) in PHP and mysql..   i have four input fields:- Name, Subject, Class & weekly lectures   now i want to insert name,subject & class into database, when i insert number of weekly lecture in field four..   insert automaticlly in database multiple time which i write in field four (weekly lecture)   database: table structure i have already is:::   id-name-subject-class-period-monday-tuesday-wednesday-thursday-friday-saturday   anybody please help me to create this database or just insert query ....    

The Script:

<form method="post" action="<?php echo $_SERVER['PHP_SELF'] ?>">
    <input type="text" name="hashtags" />
    <input type="submit" name="submit" />

</form>
<?php

if(isset($_POST['submit'])){

    $hashtags = explode(", ", $_POST['hashtags']);

// Prints e.g.: Array ( [0] => #tag1 [1] => #tag2 [2] => #tag3 [3] => #tag4 )
    print_r($hashtags);
    
}

?>

This gets inserted into the input field:

#tag1, #tag2, #tag3, #tag4

I am looking to check if any of the hashtags inside the array already exist in the database, if it does not exists it should create the new ones in the table.   I know how to do this if all do not exists in the array and then it goes over to the MySQL query and inserts all of them.   My Question Is: How to insert only the ones which do not exists out of the array, so the ones which do exists do not get inserted again into the table?
Edited by glassfish, 14 October 2014 - 10:15 AM.

Hi. I think you all know me by now so I'll cut to the chase.
Code: [Select]
<?php
$host="edited";
$username="edited";
$password="edited";
$db_name="edited";
$tbl_name="topic";
// Connect to server and select databse.
mysql_connect("$host", "$username", "$password")or die("cannot connect"); 
mysql_select_db("$db_name")or die("cannot select DB");

$name=$_POST['name'];
$detail=$_POST['details'];

$sql="INSERT INTO $tbl_name(topic, detail, datetime)VALUES('$name', '$detail', NOW())";
$result=mysql_query($sql);

if($result){
header("location:site.html");}
else{
echo("I have failed you master.");}
?>
Displayed error: "I have failed you master." Anyone know a possible cause? Thanks. Bye.

hello can anyone help me how to insert GET variable into mysql   


<?php
$page_title = 'Personal Wellness';
include ('template/header.inc');
include_once('config.php');

$id = $_GET['id'];

if(isset($_POST['submit']))
//if submit was pressed
{
if(strlen($_POST['height'])<1) //if there was no height
{
print "You did not enter a height.";
}
else if(strlen($_POST['weight'])<1) //no weight
{
print "You did not enter a weight.";
}
else if(strlen($_POST['bodyfat'])<1) //no bodyfat
{
print "You did not enter a Body Fat Range";
}
else if (strlen ($_POST['bodywater'])<1) //no bodywater
{
print "You did not enter a Body Water Range";
}
else if( strlen($_POST['musclemass'])<1) //no musclemass
{
print "You did not enter a Muscle Mass";
}
else if (strlen ($_POST['physiqueratt'])<1) //no physiqueratt
{
print "You did not enter a Physique Ratings";
}
else if (strlen ($_POST['bonemass'])<1) //no bonemass
{
print "You did not enter a Bone Mass";
}
else if (strlen ($_POST['bmr'])<1) //no bmr
{
print "You did not enter a BMR";
}
else if (strlen ($_POST['basalmetabolic'])<1) //no basalmetabolic
{
print "You did not enter a Basal Metabolic Age";
}
else if (strlen ($_POST['visceralfat'])<1) //no visceralfat
{
print "You did not enter a Visceral Fat";
}
else if(strlen($_POST['registrationmonth'] && $_POST['registrationday'] && $_POST['registrationyear'])<1) // no date
{
print "You did not enter a date of birth";
}
else //all fields met
{
$id=$_GET['id'];
$height=$_POST['height'];
$weight=$_POST['weight'];
$bodyfat=$_POST['bodyfat'];
$bodywater=$_POST['bodywater'];
$musclemass=$_POST['musclemass'];
$physiqueratt=$_POST['physiqueratt'];
$bonemass=$_POST['bonemass'];
$bmr=$_POST['bmr'];
$basalmetabolic=$_POST['basalmetabolic'];
$visceralfat=$_POST['visceralfat'];
$date=$_POST['registrationyear'] . '-' . $_POST['registrationmonth'] . '-' . $_POST['registrationday'];

$insertadmin="INSERT into personalwelness (m_id,height,weight,body_fat,body_water,muscle_mas s,physique_ratt,bone_mass,bmr,basal_metabolic,visc eral_fat,evaluation_date) values ('$id','$height','$weight','$bodyfat','$bodywater','$mus clemass','$physiqueratt','$bonemass','$bmr','$basa lmetabolic','$visceralfat','$date')"; //registering admin in databae
echo $insertadmin;
$insertadmin2=mysql_query($insertadmin) or die("Could not insert admin");
print "Personal Wellness Successfully Submitted";
}
}

?>
<form method="post" class="form" action="<?php echo $_SERVER['PHP_SELF'];?>">
<fieldset><legend>Enter Personal Wellness Information in the form below:</legend>

<table width="80%" border="0">
<tr>
<td width="16%">Height(CM)</td>
<td width="2%">:</td>
<td width="82%"><label for="height"></label>
<input type="text" name="height" id="height" value="<?php if (isset($_POST['height']))
echo $_POST['height'];?>" /></td>
</tr>
<tr>
<td>Weight(KG)</td>
<td>:</td>
<td><label for="weight"></label>
<input type="text" name="weight" id="weight" value="<?php if (isset($_POST['weight']))
echo $_POST['weight'];?>" /></td>
</tr>
<tr>
<td >Body Fat Range</td>
<td>:</td>
<td><label for="body fat"></label>
<input type="text" name="bodyfat" id="bodyfat" value="<?php if (isset($_POST['bodyfat']))
echo $_POST['bodyfat'];?>" ></td>
</tr>
<tr>
<td>Body Water Range(%)</td>
<td>:</td>
<td><label for="bodywater"></label>
<input type="text" name="bodywater" id="bodywater" value="<?php if (isset($_POST['bodywater']))
echo $_POST['bodywater'];?>"/></td>
</tr>
<tr>
<td>Muscle Mass</td>
<td>:</td>
<td><label for="musclemass"></label>
<input type="text" name="musclemass" id="musclemass" value="<?php if (isset($_POST['musclemass']))
echo $_POST['musclemass'];?>"></td>
</tr>
<tr>
<td>Physique Ratings</td>
<td>:</td>
<td><label for="physiqueratt"></label>
<input type="text" name="physiqueratt" id="physiqueratt" value="<?php if (isset($_POST['physiqueratt']))
echo $_POST['physiqueratt'];?>"></td>
</tr>
<tr>
<td>Bone Mass</td>
<td>:</td>
<td><label for="bonemass"></label>
<input type="text" name="bonemass" id="bonemass" value="<?php if (isset($_POST['bonemass']))
echo $_POST['bonemass'];?>" /></td>
</tr>
<tr>
<td>BMR</td>
<td>:</td>
<td><label for="bmr"></label>
<input type="text" name="bmr" id="bmr" value="<?php if (isset($_POST['bmr']))
echo $_POST['bmr'];?>"/></td>
</tr>
<tr>
<td>Basal Metabolic Age</td>
<td>:</td>
<td><label for="basalmetabolic"></label>
<input type="text" name="basalmetabolic" id="basalmetabolic" value="<?php if (isset($_POST['basalmetabolic']))
echo $_POST['basalmetabolic'];?>"></td>
</tr>
<tr>
<td>Visceral Fat</td>
<td>:</td>
<td><label for="visceralfat"></label>
<input type="text" name="visceralfat" id="visceralfat" value="<?php if (isset($_POST['visceralfat']))
echo $_POST['visceralfat'];?>"></td>
</tr>
<tr>
<td>Evaluation Date</td>
<td>:</td>
<td> <?php echo date_picker("registration")?></td>
</tr>
</table>
</fieldset>
<div align="center"><input type="submit" name="submit" value="Submit" />

</div>
</form>
<?php
function date_picker($name, $startyear=NULL, $endyear=NULL)
{
if($startyear==NULL) $startyear = date("Y")-100;
if($endyear==NULL) $endyear=date("Y")+50;

$months=array('','January','February','March','Apr il','May',
'June','July','August', 'September','October','November','December');

// Month dropdown
$html="<select name=\"".$name."month\">";

for($i=1;$i<=12;$i++)
{
$html.="<option value='$i'>$months[$i]</option>";
}
$html.="</select> ";

// Day dropdown
$html.="<select name=\"".$name."day\">";
for($i=1;$i<=31;$i++)
{
$html.="<option $selected value='$i'>$i</option>";
}
$html.="</select> ";

// Year dropdown
$html.="<select name=\"".$name."year\">";

for($i=$startyear;$i<=$endyear;$i++)
{
$html.="<option value='$i'>$i</option>";
}
$html.="</select> ";

return $html;
}
?>

<?php
include ('template/footer.inc');
?>

My hosting service has magic_quotes_gpc = On.  I was working on my home test server and the following script worked perfectly.  Turns out I had magic_quotes_gpc = Off .. I set magic_quotes_gpc = On and restarted.  Now the script isn't working.  See code and output below.  I know something isn't being escaped properly, but I have no clue how/what.  Even if I copy and paste the $insert output directly to phpmyadmin, it returns the same error.

Code: [Select]
//HTML Vars
$firstName = $_POST['firstName'];
$lastName = $_POST['lastName'];
$email = $_POST['email'];
$desc = $_POST['desc'];    //This is a textarea with long description.
$year = $_POST['date'];

//MySQL - no connection issues
$link = mysql_connect('localhost', '__uesr__', '__passwd__*');
$db = mysql_select_db('__DB__', $link);

$insert = "INSERT INTO images (firstName, lastName, email, descript, dateYear) VALUES ('$firstName' , '$lastName' , '$email' , '$desc' ,  '$year' ";

$query = mysql_query($insert);
if (!$query) {
die ('Can\'t query ' . mysql_error());
}

echo $insert;

::OUTPUTS::

Can't query You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1

INSERT INTO images (firstName, lastName, email, descript, dateYear) VALUES ('this' , 'is' , 'the@email.com' , 'and. the. description won\'t work.' , '3456'



Obviously I am a novice.  I have tried using mysql_real_escape_string with and without stripslashes, but I'm not getting anywhere except more errors.  Any help would be greatly appreciated.  And I don't care about SQL injection AT ALL.  I just want the thing to work with proper escaping for the description if a user inputs special chars.