PHP - Html Code Layout

I'm trying to submit html/php code through an html form and then insert it into a mysql database. I've got the following code so far (without the insert into database query), however when I submit the form I get pushed through to my 403 page. If i comment out the textarea that contains the code I am trying to submit, then it goes through fine.

Any ideas?


Code: [Select]
<?
if (isset($_POST['optone'])) {$optone=$_POST['optone']; $opttwo=$_POST['opttwo'];}
if (isset($_POST['type'])) {if ($_POST['type']=='Theory') {$optone=1;} if ($_POST['type']=='Demo') {$optone=2;} $opttwo=$_POST['module'];}

?>

<h3>Module administration</h3>
<script>
function setOptions(chosen) {
var selbox = document.myform.opttwo;
 
selbox.options.length = 0;
if (chosen == " ") {
  selbox.options[selbox.options.length] = new Option('Please select an option first',' ');
  document.myform.go.disabled=true;
 
}
if (chosen == "1") {
  selbox.options[selbox.options.length] = new Option('Module 1','1');
  selbox.options[selbox.options.length] = new Option('Module 2','2');
  selbox.options[selbox.options.length] = new Option('Module 3','3');
  selbox.options[selbox.options.length] = new Option('Module 4','4');
  selbox.options[selbox.options.length] = new Option('Module 5','5');
  selbox.options[selbox.options.length] = new Option('Module 6','6');
  selbox.options[selbox.options.length] = new Option('Module 7','7');
  selbox.options[selbox.options.length] = new Option('Module 8','8');
  selbox.options[selbox.options.length] = new Option('Module 9','9');
  selbox.options[selbox.options.length] = new Option('Module 10','10');
  document.myform.go.disabled=false;
}
if (chosen == "2") {
  selbox.options[selbox.options.length] = new Option('Module 1','1');
  selbox.options[selbox.options.length] = new Option('Module 2','2');
  selbox.options[selbox.options.length] = new Option('Module 3','3');
  selbox.options[selbox.options.length] = new Option('Module 4','4');
  selbox.options[selbox.options.length] = new Option('Module 5','5');
  selbox.options[selbox.options.length] = new Option('Module 6','6');
  selbox.options[selbox.options.length] = new Option('Module 7','7');
  selbox.options[selbox.options.length] = new Option('Module 8','8');
  selbox.options[selbox.options.length] = new Option('Module 9','9');
  selbox.options[selbox.options.length] = new Option('Module 10','10');
  document.myform.go.disabled=false;
}
}
</script>
<br />
<center>
<form name="myform" method='post'>
Edit:
<select id="optone" name="optone" size="1" onchange="setOptions(document.myform.optone.options[document.myform.optone.selectedIndex].value);" >
<option value=" " >--Choose--</option>
<option value="1" >Theory</option>
<option value="2" >Demo</option>
</select>
<select name="opttwo" size="1">
<option value=" " selected="selected">Please select an option first</option>
</select>
<input type='submit' name='go' id='go' value='Go' disabled='disabled'/>
</form>
</center>
<br /><br />
<?
if (isset($opttwo)) {
if ($optone==1) {$query = "SELECT info,userscompleted,last_user,enabled FROM theorydata WHERE TheoryID=".$opttwo; $typestr='Theory'; $texthelp='Code must be entered in HTML';}
if ($optone==2) {$query = "SELECT info,userscompleted,last_user,enabled FROM demodata WHERE DemoID=".$opttwo; $typestr='Demo'; $texthelp='Code must be entered in PHP';}
$result = mysql_query($query) or die(mysql_error());
$row = mysql_fetch_array($result);
$query2="SELECT full_name FROM users WHERE id=".$row['last_user'];
$result2 = mysql_query($query2) or die(mysql_error());
$row2 = mysql_fetch_array($result2);

?>
<form method='post' >
<table>
<tr>
<td align='center'>
Type:
</td>
<td>
<input type='text' name='type' readonly='readonly' value="<? echo $typestr; ?>" />
</td>
</tr>
<tr>
<td align='center'>
Module:
</td>
<td>
<input type='text' name='module' readonly='readonly' value="<? echo $opttwo; ?>" />
</td>
</tr>
<tr>
<td align='center' >
Enabled?
</td>
<td>
<select name='enabled'>
<option value='yes' <? if ($row['enabled'] == '1') {echo "selected='selected'";}?> >Yes</option>
<option value='no' <? if ($row['enabled'] == '0') {echo "selected='selected'";}?> >No</option>
</select>
</td>

</tr>
<tr>
<td align='center'>
Code:
</td>
<td>
<center><font color='red'><? echo $texthelp; ?></font></center>
<textarea  name='info' rows=35 cols=80><? echo htmlentities($row['info']); ?></textarea>
</td>
</tr>
<tr>
<td align='center' >
Users completed:
</td>
<td>
<input type='text' name='userscompleted' value="<? echo $row['userscompleted']; ?>" size=4/>
</td>
</tr>
<tr>
<td align='center' >
Last user:
</td>
<td>
<input type='text' name='last_user' readonly='readonly' value="<? echo $row2['full_name']; ?>" />
</td>
</tr>
<tr>
<td></td>
<td align='center'>
<input type='submit' value='Edit'/>
</td>
</tr>
</table>
</form>
<?
}//close isset(opttwo)
?>

This doesn't work inside html.
Code: [Select]
<tr valign="top">
                <td height="22" align="right" valign="middle"><!-- <img src="images/bult-gamblingtemplatesdotnet.jpg" width="11" height="11"> --></td>
                <td height="22" valign="middle"><class="navbar3">
                <?php
include("config.php");
$result = mysql_query("SELECT name, lic_num, purpose FROM charity where sysdate() between start_date and end_date");
while ($row = mysql_fetch_array($result,MYSQL_ASSOC)) {
print "<b>Charity: </b>".$row{'name'}."<br><b>License #: </b>".$row{'lic_num'}."<br><b>Purpose: </b>".$row{'purpose'}."<p>";
}
mysql_close($dbh);
?></td>

This is the output on the website.
Code: [Select]
Charity: ".$row{'name'}."
License #: ".$row{'lic_num'}."
Purpose: ".$row{'purpose'}."

"; } mysql_close($dbh); ?>

When I do this
Code: [Select]
<tr valign="top">
     <td height="22" align="right" valign="middle"><!-- <img src="images/bult-gamblingtemplatesdotnet.jpg" width="11" height="11"> --></td>
     <td height="22" valign="middle"><class="navbar3"><?php include("test.php"); ?></td>
</tr>

I get this
Code: [Select]



Can someone please point me in the correct direction?
Also if I run the code as a stand alone it works perfectly.

Thanks

I am sure this has been answered in the past and is a valid question, I have searched high and low for this solution on and off for a few months. Any help would be greatly appreciated...

Please note: if you respond, keep it simple-ish - I code but not advanced.

First, take a look at the HTML source on the following page... Specificity the meta description.
http://boormanarchery.com/test.php?route=common/home&information_id=5

Code: [Select]
<META NAME="Description" CONTENT="Terms &amp; Conditions - <p>

Terms &amp; Conditions</p>

">
HTML code is pulled into the description field... I want to strip every single piece of HTML.

Here is my HTML / PHP code...

Code: [Select]

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<?php
$con = mysql_connect("localhost","username","password");
mysql_select_db("MyDatabase",$con);
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

// Get ID From URL
$id = (isset($_GET['information_id']) ? $_GET['information_id'] : 0);
$routeid = (isset($_GET['route']) ? $_GET['route'] : 0);

// Return Product Code and Select
$details = "SELECT * FROM information_description WHERE information_id=($id)";

$SQ_query = mysql_query($details);
$detail = mysql_fetch_array($SQ_query);

$metatitle = $detail['title'];
$longdescription = $detail['description'];

$metadescription=substr($longdescription, 0, 150);
$metakeywords=substr($longdescription, 0, 150); 

mysql_close($con);
?>

<html>
<head>
<title>Boorman Archery: <?php echo "$metatitle"; ?></title>
<META NAME="Description" CONTENT="<?php echo "$metatitle"; ?> - <?php echo html_entity_decode($metadescription, ENT_QUOTES, "ISO-8859-1"); ?>">
<META NAME="Keywords" CONTENT="<?php echo "$metatitle"; ?> , archery, boorman, bows, arrows">
<META NAME="author" content="Randall Wright">
<META NAME="copyright" content="Boorman Archery">
<meta http-equiv="pragma" content="no-cache">
<META NAME="language" content="en-us">
<META NAME="rating" content="General">
<META name="robots" content="index,follow">
<META NAME="revisit-after" content="7 Days">
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">

</head>

<body>

</body>
</html>

Hi, I have a working PHP script that picks data from an XML file. I would like the script to pick values from certain range.
Right now the PHP shows every Item with name and value in a table. So when all 4 of the item values are shown they are beneath each other in a column.
But i would like them all to be next to each other. Therefore if i have these 4 item values (Name 0000), if i could pick them from the XML e.g. not the first but the second than i could make them manually with 4 different PHP scripts and put them next to each other.

I'm not very good at PHP, but i think this is probably very easy thing to do.
Thanks in advance.

The PHP script looks like this:
Code: [Select]
<?

  // DOMElement->getElementsByTagName() -- Gets elements by tagname
  // nodeValue : The value of this node, depending on its type.
  // Load XML File. You can use loadXML if you wish to load XML data from a string

  $objDOM = new DOMDocument();
  $objDOM->load("feed.xml"); //make sure path is correct


  $note = $objDOM->getElementsByTagName("item");
 
  // for each note tag, parse the document and get values for
  // tasks and details tag.

  foreach( $note as $value ){

 
    $places = $value->getElementsByTagName("name");
    $place  = $places->item(0)->nodeValue;

    $details = $value->getElementsByTagName("amount");
    $detail  = $details->item(0)->nodeValue;




    echo "<BODY STYLE='background-color:transparent'>

<table border='0'>
  <tr>
    <td width='127'><table width='127px' border='0' cellpadding='0' cellspacing='0'>
<tr>
<td><p style='font-family:arial;color:white;font-size:22px;padding-left:3px;text-align:left;  background:url(bg2.png)'><strong> $place</strong></p></td>

</tr>

</table>
</td>
    <td width='115'>
      <table width='115px' border='0' cellpadding='0' cellspacing='0'>
        <tr>
          <td><p style='font-family:arial;color:white;font-size:22px;text-align:right;padding-right:5px; background:url(bg1.png)'><strong>$detail</strong></p></td>
         
        </tr>
       
</table></td>
  </tr>
 
</table>




";
 $i++; }
?>
And the XML looks like this:
Code: [Select]
<xml>
<item>
<name>Examplename</name>
<amount>0000</amount>
</item>
<item>
<name>Examplename</name>
<amount>0000</amount>
</item>
<item>
<name>Examplename</name>
<amount>0000</amount>
</item>
<item>
<name>DExamplename</name>
<amount>0000</amount>
</item>
</xml>

Hello,

I'm pretty new to php and have a small problem I can't figure out.

I have passed some copy (john & mary) from a small form to a url with php (i used urlencode). The code in the url looks like this john+%26+mary.

My problem is, how do I display the %26 as an actual ampersand (&) on the html page? Here is the snippet of code that I am currently using to display the names.

<?php echo htmlentities($_GET['gallery']); ?>

I have searched and searched and can't find anything to figure this out.

Any help would be great.

Thanks.

Hi guys, first of all, sorry for my bad english

I have a question,

As title, how can i avoid html tags in a text passed by $_POST method?

htmlentities() is one way, i think, but... there's another way to avoid me to use that? I don't like to decode again every text!

Edit:
is strip_tags(); good for this purpose?

Hello, people!   I was watching some php tutorials in youtube and, in a video, the guy was showing how put php script inside html code. I would like to know why in the following code he didn't use only one php script? 1- Code used in the video:

<html>
<body>

<?php
$color = $_GET['clr'];
?>

<b><font color="<?php echo $color;?>">This is a test.</font></b>

</body>
</html>

  2- Modified code by me to test with one script:

<html>
<body>

<?php
$color = $_GET['clr'];

echo "<b><font color=\"$color\"> This is a test. </font></b>";

?>

</body>
</html>

  Is his code more correct(with two scripts)? Why?

Hello dear friends,

If i've database table (my_table) with one field (text)
and i've created form with textarea

Code: [Select]
<form action="#">
<textarea name="text" id="text"></textarea>
<input type="submit" name="Submit" value="Submit">
</form>
I can add any text inside it and save it in my database table
but when i add html codes it also store it perfect but only 2 codes is not 

the closing of form and textarea </form> and </textarea> it not stored and automatically not saved Why !

i mean if i paste inside the above form - textarea the following code for example

Code: [Select]
<form>
<textarea>blah</textarea>
</form>
it will store it as
Code: [Select]
<form>
<textarea>blah


and will not store </form> and </textarea> how then i can add html codes with textarea and form inside it without conflict

thanks

Hi everyone

I just getting back to PHP after a break but have forgot how to build a HTML table row. Here is the part of the code that builds up rows for a html table...



while($rows = mysql_fetch_array($qry)){
        
           $table .= "
           <tr>

<td><input type=\"checkbox\" name=\"C1\" value=\"ON\"></td>

<td width=\"87\">$rows['ref']</td>

<td width=\"178\">$rows['transactionReferenceNumber']</td>

<td>$rows['totalAmountReceived']</td>

<td>$rows['myItemQuantity']</td>

<td>$rows['flag_1']</td>

<td>$rows['flag2']</td>

</tr>

           ";

}



This causes an error as you might expect. Please tell me the best way to place the html code into $table

In a PHP file [php_one.php], I wrote some PHP code that contained a form.  I used ECHO to write the HTML inside of the PHP tags.

On another PHP page [php_two.php], I wanted to show the code that was used to create the first page [php_one.php].

My first effort provided an interesting result, since the PHP code was readable.  However, all HTML code was visible in its executed form.

There was an actual input field and a submit button (not the code used to produce them) in the context of my coding.

I have tried using:

file_get_contents("FILE")
$array = file("FILE")
readfile("FILE")

All results were similar and carried the same problem.

How can I view code so that even the HTML is visible as code?

I have the content of an email in a database, and I need to generate a screenshot of the email based on that..

I'm thinking this won't be possible in PHP and I'll have to use some service? Anyone know where to begin?

Hi

I'm currently in the process of re-developing a website for a client in Wordpress. I've completed the work apart from the fact that on the old site the client has a webpage with an email subscription form for subscribing to a newsletter. The form takes a 'Name' and 'Email Address' and writes these to a MySQL database in the back end.

I've tried adding the code to a page in wordpress and have a few plugins which allow PHP code execution on both the sidebar and page but when the button is clicked to submit the subscription nothing appears to happen as on the origonal page.

I really need to know whether this type of code could be imported into Wordpress and made to work or how to go about writing a wordpress page that will write to the same database.

Any advice on this would be helpful as I'm not a strong php coder.

The Code is as follows:

There's a contact.php page on the origoanl site that calls inc-mailing-list.php that also referrences a mysqlconnections.php file

I've put all the code below for referrence.

Origonal Site: contact.php
Code: <?php
session_start();
$string = strtoupper($_SESSION['string']);
$userstring = strtoupper($_POST['userstring']);
session_destroy();

?>

HTML PAGE FORMATTING (REMOVED FOR THE POST)

<?php include("inc-mailing-list.php"); ?></TD>
<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
try {
var pageTracker = _gat._getTracker("UA-9716450-1");
pageTracker._trackPageview();
} catch(err) {}</script></body>

</html>


INC-MAILING-LIST.PHP

<?php require_once('Connections/mysqlconnection.php'); ?>
<?php

/* In contact.php
session_start();
$string = strtoupper($_SESSION['string']);
$userstring = strtoupper($_POST['userstring']);
session_destroy(); 
*/

///// Anti sql injection
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
{
  $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;   
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
}
//// Site config
$siteName = "South Wales Art Society";
$siteURL = "www.southwalesartsociety.co.uk";
$siteEmail = "info@southwalesartsociety.co.uk";

///// Establish the current date/time as a variable
$now = date('Y-m-d H:i:s'); // Current date

//// Call mailing lists
mysql_select_db($database_mysqlconnection, $mysqlconnection);
$query_callMailingLists = "SELECT * FROM content WHERE contenttype = 501 AND onlinestatus = '1' ORDER BY displayorder ASC";
$callMailingLists = mysql_query($query_callMailingLists, $mysqlconnection) or die(mysql_error());
$row_callMailingLists = mysql_fetch_assoc($callMailingLists);
$totalRows_callMailingLists = mysql_num_rows($callMailingLists);



//// Unsubscribe
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "elist") && ($_POST["subscription"] == "unsubscribe") && (strlen($_POST["email"]) > 4) && ($string == $userstring) && (strlen($string) > 4)) {

  $deleteSQL = sprintf("DELETE FROM content WHERE email=%s AND contenttype = 500", GetSQLValueString($_POST['email'], "text"));

  mysql_select_db($database_mysqlconnection, $mysqlconnection);
  $Result1 = mysql_query($deleteSQL, $mysqlconnection) or die(mysql_error());
  $status = "1";
 
 
 
//SEND CONFIRMATION EMAIL
   
$to      = $_POST['email'];
$subject = $siteName.' Mailing List';
$body = 'Your email address has been removed from the '.$siteName.' mailing list.' . "\n\r";
$body .= $siteURL . "\n\r";       
$headers = 'From: '.$siteEmail . "\r\n" .
           'X-Mailer: PHP/' . phpversion();
       
mail($to, $subject, $body, $headers);



}


/////////////////// SUBSCRIPTION ////////////////////////



// Insert comment if sent and valid
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "elist") && ($_POST["email"] != "") && ($_POST["subscription"] == "subscribe") && ($string == $userstring) && (strlen($string) > 4)) {

////////////////////////////////////////////////////////////////////////////////////
///////////////////////////// COUNT AND JOIN TAGS //////////////////////////////////
////////////////////////////////////////////////////////////////////////////////////
$tagCombination1 = ""; // Default value to define variable.
$tagTotal = ""; // Default value to define variable.
if (isset($_POST['TagsTotal1'])) { $tagTotal = $_POST['TagsTotal1'];}
$tagNumber = 0;

do { $tagNumber = $tagNumber+1;

if (isset($_POST['Tag-1-'.$tagNumber])) $tagCombination1 = $tagCombination1.",".$_POST['Tag-1-'.$tagNumber]; // DISREGARD UNSELECTED TAGS

} while ($tagNumber <= $tagTotal); // LOOP UNTIL ALL TAGS HAVE BEEN COMBINED

$tagCombination1 = $tagCombination1.","; // ADD A COMMA TO THE END TO GET CORRECT SEARCH PARAMETERS
$tagCombination1 = str_replace(",,",",",$tagCombination1); // CLEAR OUT ANY DOUBLE COMMAS
////////////////////////////////////////////////////////////////////////////////////
/////////////////////////// COUNT AND JOIN TAGS END ////////////////////////////////
////////////////////////////////////////////////////////////////////////////////////

  $insertSQL = sprintf("INSERT INTO content (contenttype, title1, email, date_added, tags1) VALUES (%s, %s, %s, %s, %s)",
                       GetSQLValueString(500, "int"),
                       GetSQLValueString($_POST['name'], "text"),
                       GetSQLValueString($_POST['email'], "text"),
                       GetSQLValueString($now, "text"),
                       GetSQLValueString($tagCombination1, "text"));

  mysql_select_db($database_mysqlconnection, $mysqlconnection);
  $Result1 = mysql_query($insertSQL, $mysqlconnection) or die(mysql_error());
  $status = "2";
 
 
 
//SEND CONFIRMATION EMAIL
   
$to      = $_POST['email'];
$subject = $siteName.' Mailing List';
$body = 'Thank you. Your name has been added to the '.$siteName.' mailing list.' . "\n\r";
$body .= $siteURL . "\n\r"; 
$headers = 'From: '.$siteEmail . "\r\n" .
           'X-Mailer: PHP/' . phpversion();
       
mail($to, $subject, $body, $headers);



}
?>

<div id="signup" >
<H5>Sign Up For Our Mailing List</H5>

<?php if (($_POST['email']) && ($status == "1")) { ?>
<br /><strong>Thank you, you have been removed from the mailing list.</strong>

<?php } elseif (($_POST['email']) && ($status == "2")) { ?>
<br /><strong>Thank you, you have been added to the mailing list.</strong>

<?php } else { ?>


<form name="elist" method="POST" action="">
<?php if (($_POST['email']) && ($status != "2")) { ?><p class="red"><strong>Please complete your details and enter the code.</strong></p><?php } // Error ?>

<br />

Name: <input name="name" type="text" value="<?php echo $_POST['name']; ?>" /><br />
Email: <input name="email" type="text" value="<?php echo $_POST['email']; ?>" /><br />

<input name="subscription" type="radio" id="subscription_0" value="subscribe" <?php if($_GET['unsubscribe']!="yes") { ?>checked="checked"<?php } // ?> />
Subscribe<br />
<input type="radio" name="subscription" value="unsubscribe" id="subscription_1" <?php if($_GET['unsubscribe']=="yes") { ?>checked="checked"<?php } // ?>/>
Unsubscribe<br />

<br />

<?php /*?>Select which information you would like to receive:<br />
      
<?php $tagNumbers = 0; do { $tagNumbers = $tagNumbers+1;?>
<label><input <?php if (!(strcmp($row_callMailingLists['id'],1000))) {echo "checked=\"checked\"";} ?> name="Tag-1-<?php echo $tagNumbers; ?>" type="checkbox" value="<?php echo $row_callMailingLists['id']; ?>" /><?php echo $row_callMailingLists['title1']; ?></label><br />
<?php } while ($row_callMailingLists = mysql_fetch_assoc($callMailingLists)); ?><br /><br />

<input type="hidden" name="TagsTotal1" value="<?php echo $totalRows_callMailingLists; ?>" />

USE THE TWO HIDDEN FIELDS BELOW AS THERE IS ONLY ONE LIST

<?php */?>
<input type="hidden" name="Tag-1-1" value="1000" />
<input type="hidden" name="TagsTotal1" value="1" />
 
<img src="/captcha/imagebuilder.php" alt="" border="0" /><br /><br />

<small>Please enter the code shown above.</small><br />

<input maxlength="8" size="8" name="userstring" type="password" value="" /><br /><br />

<input name="Submit" type="submit" value="Submit" /><br />


<input type="hidden" name="datesubscribed" value="<?php echo date('Y-m-d H:i:s'); ?>" />
<input type="hidden" name="MM_insert" value="elist" />
</form>
</div>
<?php } // ?>
<?php
mysql_free_result($callMailingLists);
?>

Hi all,

The below example is a workable code, taken from tutor_profile.sql table
Code: [Select]
<?php
    $query = "SELECT tutor_id, religion_id FROM tutor_profile WHERE tutor_id = '" . $_GET['tutor_id'] . "'";
    
$data = mysqli_query($dbc, $query)
or die(mysqli_error($dbc));

// The user row was found so display the user data
if (mysqli_num_rows($data) == 1) {
$row = mysqli_fetch_array($data);

print_r($row);
    if ($row != NULL) {
  $religion_id = $row['religion_id'];
  $tutor_id = $row['tutor_id'];

    }
    else {
      echo '<p class="error">There was a problem accessing your profile.</p>';
    }
  }

<!--Religion-->   
  <tr>
      <td class="label">Religion:</td>
<td>
<select id="religion_id" name="religion_id">
<option value="1" <?php if (!empty($religion_id) && $religion_id == '1') echo 'selected = "selected"'; ?>>Buddhism</option>
<option value="2" <?php if (!empty($religion_id) && $religion_id == '2') echo 'selected = "selected"'; ?>>Christianity</option>
<option value="3" <?php if (!empty($religion_id) && $religion_id == '3') echo 'selected = "selected"'; ?>>Hinduism</option>
<option value="4" <?php if (!empty($religion_id) && $religion_id == '4') echo 'selected = "selected"'; ?>>Islam</option>
<option value="5" <?php if (!empty($religion_id) && $religion_id == '5') echo 'selected = "selected"'; ?>>Taoism</option>
<option value="6" <?php if (!empty($religion_id) && $religion_id == '6') echo 'selected = "selected"'; ?>>Others</option>
</select>
</td>
  </tr>
?>

As you can see I have hard coded the names of the religion in html code
example - <option value="3" <?php if (!empty($religion_id) && $religion_id == '3') echoselected = "selected"'; ?>>Hinduism</option>

And if our record shows that the tutor has previously selected '3', it will reflect as 'hinduism' in his profile. View profile.jpg for example
example - <option value="3" <?php if (!empty($religion_id) && $religion_id == '3') echo 'selected = "selected"'; ?>>Hinduism</option>

In fact, these names can be found in another table called religion.sql, but I hard coded it anyway, without using loop (while function), since there are only 8 names
Code: [Select]
<!--Religion-->  
  <tr>
      <td class="label">Religion:</td>
<td>
<select id="religion_id" name="religion_id">
<option value="1" <?php if (!empty($religion_id) && $religion_id == '1') echo 'selected = "selected"'; ?>>Buddhism</option>
<option value="2" <?php if (!empty($religion_id) && $religion_id == '2') echo 'selected = "selected"'; ?>>Christianity</option>
<option value="3" <?php if (!empty($religion_id) && $religion_id == '3') echo 'selected = "selected"'; ?>>Hinduism</option>
<option value="4" <?php if (!empty($religion_id) && $religion_id == '4') echo 'selected = "selected"'; ?>>Islam</option>
<option value="5" <?php if (!empty($religion_id) && $religion_id == '5') echo 'selected = "selected"'; ?>>Taoism</option>
<option value="6" <?php if (!empty($religion_id) && $religion_id == '6') echo 'selected = "selected"'; ?>>Others</option>
</select>
</td>
  </tr>

Currently I am facing an issue, I guess I will need to use looping, as there are 22 names in another table which I will need to call forth, tutor_educational_level.sql, and the number of names get more and more in other tables.

My question is, how do I pull out the entire list of names into a drop down box and yet showing the selected name which the user has chosen, more elaboration can be seen in profile.jpg. In profile.jpg - as you can see the list of names are shown in the drop down box and the system is able to decipher the chosen name.

Another
Example
1) N level
2) O level
3) A level
4) University

User selected '3', which is A level, and system would still show the list of educational_names in a drop down box,, but selecting A level as the one to appear.

Example
1) N level
2) O level
3) A level (selected)
4) University

It should have the same overall result as the religion which I have stated above, however this time round, it is using looping function (while) to retrieve the entire list of names, select and show the name which the user has chosen


Below is my code, and I know it is wrong, but generally would like to relate my idea across.
Code: [Select]
<?php
<!--Teaching Credentials-->   
  <tr>
      <td class="label">Teaching Credentials:</td>
<td>
<?php
echo '<select name="educational_level" id="educational_level">';

$dbc = mysqli_connect(DB_HOST, DB_USER, DB_PASSWORD, DB_NAME)
or die(mysqli_error($dbc));
$query = "SELECT tp.educational_id, el.educational_name AS educational_name, el.educational_id AS list_educational_id " . 
  "FROM tutor_profile AS tp " .
  "INNER JOIN * tutor_educational_level AS el USING (educational_id) " .
  "WHERE tp.tutor_id = '" . $_GET['tutor_id'] . "'";
$sql = mysqli_query($dbc, $query)
or die(mysqli_error());



while($data = mysqli_fetch_array($sql)) {
echo'<option value="'.$data['list_educational_id'].'">'.$data['educational_name'].'</option>';
if (!empty ($data['educational_id']) && ($data['educational_id']) == ($data['list_educational_id'])) {
echo 'selected = "selected"';
}
}
echo '</select><br/>';

mysqli_close($dbc);
?>
</td>
  </tr>
?>