PHP - Change Php Query From Url String To Code

Hello all,   Based on the suggestion of you wonderful folks here, I went away for a few days (to learn about PDO and Prepared Statements) in order to replace the MySQLi commands in my code. That's gone pretty well thus far...with me having learnt and successfully replaced most of my "bad" code with elegant, SQL-Injection-proof code (or so I hope).   The one-and-only problem I'm having (for now at least) is that I'm having trouble understanding how to execute an UPDATE query within the resultset of a SELECT query (using PDO and prepared statements, of course).   Let me explain (my scenario), and since a picture speaks a thousand words I've also inlcuded a screenshot to show you guys my setup:   In my table I have two columns (which are essentially flags i.e. Y/N), one for "items alreay purchased" and the other for "items to be purchased later". The first flag, if/when set ON (Y) will highlight row(s) in red...and the second flag will highlight row(s) in blue (when set ON).   I initially had four buttons, two each for setting the flags/columns to "Y", and another two to reverse the columns/flags to "N". That was when I had my delete functionality as a separate operation on a separate tab/list item, and that was fine.   Now that I've realized I can include both operations (update and delete) on just the one tab, I've also figured it would be better to pare down those four buttons (into just two), and set them up as a toggle feature i.e. if the value is currently "Y" then the button will set it to "N", and vice versa.   So, looking at my attached picture, if a person selects (using the checkboxes) the first four rows and clicks the first button (labeled "Toggle selected items as Purchased/Not Purchased") then the following must happen:   1. The purchased_flag for rows # 2 and 4 must be switched OFF (set to N)...so they will no longer be highlighted in red. 2. The purchased_flag for row # 3 must be switched ON (set to Y)...so that row will now be highlighted in red. 3. Nothing must be done to rows # 1 and 5 since: a) row 5 was not selected/checked to begin with, and b) row # 1 has its purchase_later_flag set ON (to Y), so it must be skipped over.   Looking at my code below, I'm guessing (and here's where I need the help) that there's something wrong in the code within the section that says "/*** loop through the results/collection of checked items ***/". I've probably made it more complex than it should be, and that's due to the fact that I have no idea what I'm doing (or rather, how I should be doing it), and this has driven me insane for the last 2 days...which prompted me to "throw in the towel" and seek the help of you very helpful and intellegent folks. BTW, I am a newbie at this, so if I could be provided the exact code, that would be most wonderful, and much highly appreciated.   Thanks to you folks, I'm feeling real good (with a great sense of achievement) after having come here and got the great advice to learn PDO and prepared statements.   Just this one nasty little hurdle is stopping me from getting to "end-of-job" on my very first WebApp. BTW, sorry about the long post...this is the best/only way I could clearly explaing my situation.   Cheers guys!

case "update-delete":
	if(isset($_POST['highlight-purchased'])) 
		{
			// ****** Setup customized query to obtain only items that are checked ******
			$sql = "SELECT * FROM shoplist WHERE";
					for($i=0; $i < count($_POST['checkboxes']); $i++)
						{
							$sql=$sql . " idnumber=" . $_POST['checkboxes'][$i] . " or";
						}
					$sql= rtrim($sql, "or");
											
			$statement = $conn->prepare($sql);
			$statement->execute();
																						
			// *** fetch results for all checked items (1st query) *** //
			$result = $statement->fetchAll();

			$statement->closeCursor();
											
			// Setup query that will change the purchased flag to "N", if it's currently set to "Y"
			$sqlSetToN = "UPDATE shoplist SET purchased = 'N' WHERE purchased = 'Y'";
											
			// Setup query that will change the purchased flag to "Y", if it's currently set to "N", "", or NULL
			$sqlSetToY = "UPDATE shoplist SET purchased = 'Y' WHERE purchased = 'N' OR purchased = '' OR purchased IS NULL";

			$statementSetToN = $conn->prepare($sqlSetToN);
			$statementSetToY = $conn->prepare($sqlSetToY);
											
			/*** loop through the results/collection of checked items ***/
			foreach($result as $row)
				{
					if ($row["purchased"] != "Y")
						{
							// *** fetch one row at a time pertaining to the 2nd query *** //
							$resultSetToY = $statementSetToY->fetch();
															
							foreach($resultSetToY as $row)
								{															
									$statementSetToY->execute();																
								}
						}
					else
						{
							// *** fetch one row at a time pertaining to the 2nd query *** //
							$resultSetToN = $statementSetToN->fetch();
															
							foreach($resultSetToN as $row)
								{															
									$statementSetToN->execute();																
								}
						}
				}
				break;
		}

 CRUD Queston.png   20.68KB   0 downloads    

below is the script.i use it for to edit a single .html file. but now i want to edit multiple .html file by this script.

so i think i have to change dynimacaly (may be a dropdown form)  this line $url = "p".$page.".html";    and this line.

can any body help?


Code: [Select]
<?php   
  
function br2nl($str) {   
return preg_replace('=<br */?>=i', "", $str);   
}   
 
$action=$_POST['action'];   
$textarea=$_POST['textarea'];   
 
if($_GET['p']){   
$page=$_GET['p'];   
}   
 
// Assume your text pages are called, p1.db or p2.db, etc.   
$url = "p".$page.".html";   
if (file_exists($url)) {   
// do nothing   
} else {   
$url = "p0.html";   
}   
 
// where to go back to after the edit ...   
$return="edit.php?p=$edit";   
 
// Get page   
$data = implode("", file($url));   
 
if($action=="save"){   
$newtext=stripslashes($textarea);   
$newtext = str_replace("<?", "", $newtext);   
$newtext = str_replace("?>", "", $newtext);   
$newtext = nl2br($newtext);   
//echo "page: $url<br><br>\n";   
//echo $newtext;   
$fh = fopen($url, 'w') or die("can't open file");   
fwrite($fh, $newtext);   
fclose($fh);   
header ("location:edit.php?p=$page");   
}   
else{   
 
?> 
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> 
<html xmlns="http://www.w3.org/1999/xhtml"> 
<head> 
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> 
<title>abeer cms</title> 
<script type="text/javascript" src="jscripts/tiny_mce/tiny_mce.js"></script> 
<script type="text/javascript"> 
tinyMCE.init({ 
        // General options 
        mode : "textareas", 
        theme : "advanced", 
        plugins : "safari,spellchecker,pagebreak,style,layer,table,save,advhr,advimage,advlink,emotions,iespell,inlinepopups,insertdatetime,preview,media,searchreplace,print,contextmenu,paste,directionality,fullscreen,noneditable,visualchars,nonbreaking,xhtmlxtras,template,imagemanager,filemanager", 
 
        // Theme options 
        theme_advanced_buttons1 : "save,newdocument,|,bold,italic,underline,strikethrough,|,justifyleft,justifycenter,justifyright,justifyfull,|,styleselect,formatselect,fontselect,fontsizeselect", 
        theme_advanced_buttons2 : "cut,copy,paste,pastetext,pasteword,|,search,replace,|,bullist,numlist,|,outdent,indent,blockquote,|,undo,redo,|,link,unlink,anchor,image,cleanup,help,code,|,insertdate,inserttime,preview,|,forecolor,backcolor", 
        theme_advanced_buttons3 : "tablecontrols,|,hr,removeformat,visualaid,|,sub,sup,|,charmap,emotions,iespell,media,advhr,|,print,|,ltr,rtl,|,fullscreen", 
        theme_advanced_buttons4 : "insertlayer,moveforward,movebackward,absolute,|,styleprops,spellchecker,|,cite,abbr,acronym,del,ins,attribs,|,visualchars,nonbreaking,template,blockquote,pagebreak,|,insertfile,insertimage", 
        theme_advanced_toolbar_location : "top", 
        theme_advanced_toolbar_align : "left", 
        theme_advanced_statusbar_location : "bottom", 
        theme_advanced_resizing : true, 
 
        // Example content CSS (should be your site CSS) 
        content_css : "css/example.css", 
 
        // Drop lists for link/image/media/template dialogs 
        template_external_list_url : "js/template_list.js", 
        external_link_list_url : "js/link_list.js", 
        external_image_list_url : "js/image_list.js", 
        media_external_list_url : "js/media_list.js", 
 
        // Replace values for the template plugin 
        template_replace_values : { 
                username : "Some User", 
                staffid : "991234" 
        } 
}); 
</script> 
<style>   
body,html{   
margin:0px auto;   
width:700px;   
text-align:center;   
}   
#content{   
margin:0px auto;   
width:700px;   
}   
#middle h1 {   
    color: transparent;   
    font-family:georgia;   
    font-size:12pt;   
    margin:0;   
    color: #dF9100;   
    padding:10px 0px 15px 0px;   
    text-align:left;   
}   
</style>   
</head> 
 
<body> 
<div id='content'>   
<? 
 
$ta=br2nl($data);   
 
echo"   
<a href='$return'><-- Return to Page</a><br /><br />   
Make Changes and click \"Save Changes\" at the very bottom ...<br />   
<form action='edit.php' method='post'>   
<input type='hidden' name='action' value='save'>   
<input type='hidden' name='p' value='$page'>   
<input type='hidden' name='n' value='$n'>   
<textarea name='textarea' rows='25' cols='80'>$ta</textarea>   
<br />   
<input type='submit' name='submit' value='Save Changes'>   
</form>   
 
<div id='middle' style='width:680px; text-align:left; padding-left:20px; border:1px solid #ccc;'>   
</div>   
</div>   
</body>   
</html>   
";   
}   
 
?>

I've made a few attempts at this, but I'm likely not making much sense.... I'm working on how to phrase the question.

I had a MySQL database where I used to combine user first AND last names in a single string... I called that string "Member"

So if I filtered:
www.mysite.com/members.php?Member=Peter

It would find and display all Peters: Peter Rabbit and Peter Griffith and Pope Peter.  This is what I want.

I'm now keeping each name (first and last) in separate strings (as separate variables?), and I am combining them in an array to display on the website:

Code: [Select]
$First = $First;
$Last = $Last;

$member = array($Last, $First,);
foreach ($Member as $key => $v ) if (!$v) unset ($Member[$key]);
$Member = implode(', ', $Member);
echo $Member;

Now I've lost the ability to search all the members for Peter.

So if I filtered:
www.mysite.com/members.php?First=Peter
...it would work.... for Peter Rabbit and Peter Griffith, but not Pope Peter

I cannot query the entire array?  I can no longer check members (first and last names) for Wayne?
www.mysite.com/members.php?Member=Peter

I'm betting I can, but there's a lot more to it... and 8 hours of Googling haven't helped much.

Thanks for listening.

~Wayne

I'm going to create a web page with <iframe> tag & want that the src of <iframe> change as 

Hi there,
im trying to have a form show up when user clicks "add joke". I need the variable to be retrieved from the url query string. I cant get the form to show up.  I think its either an issue with the GET function at the top or the link down at the bottom. Please help!


<?php
  // If the user wants to add a joke
  
    $_GET['addjoke'] = $addjoke;

  if (isset($addjoke)):
?>

<FORM ACTION="<?php echo($PHP_SELF); ?>" METHOD=POST>
<P>Type your joke he <BR>
<TEXTAREA NAME="joketext" ROWS=10 COLS=40 WRAP>
</TEXTAREA><BR>
<INPUT TYPE=SUBMIT NAME="submitjoke" VALUE="SUBMIT">
</FORM>

<?php
  else:

    // Connect to the database server
    $dbcnx = @mysql_connect("servername", "username", "password");
    if (!$dbcnx) {
      echo( "<P>Unable to connect to the " .
            "database server at this time.</P>" );
      exit();
    }

    // Select the jokes database
    if (! @mysql_select_db("jhodara2") ) {
      echo( "<P>Unable to locate the joke " .
            "database at this time.</P>" );
      exit();
    }

    // If a joke has been submitted,
    // add it to the database.

$joketext = $_POST['joketext']; 
$submitjoke = $_POST['submitjoke']; 

    if ("SUBMIT" == $submitjoke) {
      $sql = "INSERT INTO jokes SET " .
             "JokeText='$joketext', " .
             "JokeDate=CURDATE()";
      if (mysql_query($sql)) {
        echo("<P>Your joke has been added.</P>");
      } else {
        echo("<P>Error adding submitted joke: " .
             mysql_error() . "</P>");
      }
    }
  
    echo("<P> Here are all the jokes " .
         "in our database: </P>");
  
    // Request the text of all the jokes
    $result = mysql_query(
              "SELECT JokeText FROM jokes");
    if (!$result) {
      echo("<P>Error performing query: " .
           mysql_error() . "</P>");
      exit();
    }
  
    // Display the text of each joke in a paragraph
    while ( $row = mysql_fetch_array($result) ) {
      echo("<P>" . $row["JokeText"] . "</P>");
    }
  
    // When clicked, this link will load this page
    // with the joke submission form displayed.
    echo("<P><A HREF='$PHP_SELF?addjoke=1'>Add a Joke!</A></P>");
  
  endif;
  
?>


see the problem live at http://www.freewaycreative.com/insert2.php