PHP - Trim $_post Values Before Using It To Query The Database.

I have a table that I must be populated based on a check box selection. The maximum selection is 5, however, there are more then 10 choices. For example: Here is a choice of 10 different (checkbox) options that the user can select from:

1. Coke
2. Root Beer
3. Pepsi
4. Dr. Pepper
5. Sprite
6. 7up
7. Cream Soda
8. Club Soda
9. Water
10. Milk

I've already managed to limit the users selection to only 5. My issue is determining which of the checkboxese were actually selected so that I can correctly place them in my database.

The first thing to do is create variables from all the checkboxes:

$coke = $_POST['coke'];
$rootbeer = $_POST['rootbeer'];
$pepsi = $_POST['pepsi'];
$drpepper = $_POST['drpepper'];
etc. etc.

Now that I have all 10 selections as variables from a submitted form how can I determine which ones are empty (or which ones have values) so that I can then save them to the database respectively?

Hi all

I am populating a List menu with values from Mysql table. The values are populated correctly. Once a selection is made and upon submit when I display POST submit values using print_r($_POST) the result is correct only when the value do not contain spaces. For example if the list selection is "One" the $_POST[sel] value is correct. But if the selection is "Two Three" it is only first part before space. How do I get it to give complete value as in the list.

Thanks and Regards

SKN

Well I have a script file that loads lots of info from a form using $_POST[] method, which is quite tedious:

Code: [Select]
  $act = $_POST["act"];
          $page = $_POST["page"];
  $id = $_POST["id"];
  $category = $_POST["category"];
          $itemname = $_POST["itemname"];
          $description = $_POST["description"];
  $imageurl = $_POST["imageurl"];
  $existingimageurl = $_POST["existingimageurl"];
  $function = $_POST["function"];
  $target = $_POST["target"];
  $value = $_POST["value"];
  $shop = $_POST["shop"];
          $price = $_POST["price"];
  $tradable = $_POST["tradable"];
  $consumable = $_POST["consumable"];

I was wondering if there is a way to write one or two simple lines of code to load all variables stored in superglobal array $_POST[] efficiently. The point is to store all values within $_POST[] to an array called $item[], what I was thinking about is:

Code: [Select]
foreach($_POST = $key as $val){
  $item['{$key}'] = $val;
}

Seems that its not gonna work, so I wonder if anyone of you have ideas on how I am able to simplify my code with 10-20 lines of $_POST[] to just 2-3 lines. Please do lemme know if this is possible, thanks.

Hello everyone,

I'm trying to code a section of the site which is like an advertising website (i.e, gumtree) where people can post an Ad on the site and have any responses sent to them via email. The thing is that I have a form where they can enter their details and need to POST the information to the following page which is a preview page of their Ad. I have the form action returning to the same page for validation but I need the $_POST vaules to populate the following page without sending information to the database (in an effort to keep the database clean should they decide not to publish their Ad.

There are 3 pages in total CREATE AD > PREVIEW AD (where they can go back and edit if they need to) > Publish AD (where they confirm terms and send to database).  I do have session variables already set after login in and a seperate table to hold the details after they have confirmed the Ad & terms.

Any ideas would be greatly appreciated.

Thanks, L-plate

I'm trying firstly to output hidden fields based on the values of the $_POST variable.

Then after that I want to output the values again in a unordered list.

I'm using the following code:
while (list($key, $val) = each($_POST)) {
if ($key != 'Submit') {
echo '<input type="hidden" name="' . $key . '" value="' . $val . '" />';
}
}

echo '<ul>';
while (list($key, $val) = each($_POST)) {
if ($key != 'Submit') {
echo '<li><strong>' . $key . '</strong>: <span class="highlight-219ddb">' . $val . '</span></li>';
}
}
echo '</ul>';

However the <ul> appears to be blank? Can I only use the list() function once on a particular variable?

So, i need this.

Code: [Select]
 
  <?php
    $query = "Select * from users where username = '$user' ";
    $result = mysql_query($query) or die(mysql_error());
    $row = mysql_fetch_array($result);

    $test = $_POST['test1'];
    $ques = "Select * from questions where testname = '$test' ";
    $qres = mysql_query($ques) or die(mysql_error());
    $qdetails = mysql_fetch_array($qres);
    $id = $qdetails['id'];
    $testname = $qdetails['testname'];
    $ans = "Select * from answers where qid = $id";
    $ares = mysql_query($ans) or die(mysql_error());
    if($qdetails) {
    ?>
    <div class="padding">

    <form name="answerform" action="answer.php" method="POST">
    <h3>&nbsp;</h3>
    <input name="test2" id="test2"  type="text" value="<?php echo $qdetails['testname'];?>"      /><h3><?php echo $qdetails['text'];?></h3>
     <input name="test3" id="test3"  type="text" value="<?php echo      $qdetails['testseries'];?>" /><h3><?php echo $qdetails['text'];?></h3>
    <br />
    <br />
    <br />
    <?php while($opdetails = mysql_fetch_assoc($ares)) { ?>
    <input class="text" id="opt2" name="correctans" type="radio" value="<?php echo $opdetails['text']; ?>" /><br /><?php echo $opdetails['text']; ?>  <?php }?>
    <div class="two-fields clearfix".
    <p class="confirm">&nbsp;</p>
    </div>
    <input type="submit" value="SUBMIT ANSWER" />
    </form>
    </div>
    </div>
    </div>
 <?php }

this is the code for the program where i am creating the fields i want to fetch the data from the input fields with the name test 2 and test 3 in answer.php

Code: [Select]
    $query = "Select score from users where username = '$user' ";
    $result = mysql_query($query) or die(mysql_error());
    $row = mysql_fetch_array($result);
    $user_score = $row['score'];

    print_r($_REQUEST);
    $tester = $_POST['test3'];
    $test = $_POST['test2'];
    print_r($_POST);
    var_dump($_POST);
    $ques = "Select * from questions where testname = '$test' And testseries = '$tester' ";
    $result = mysql_query($ques) or die(mysql_error());
    $row = mysql_fetch_array($result);
    $qid = $row['id'];
    $score = $row['score'];
    if(isset($_POST['correctans']))
    {
    $answer = $_POST['correctans'];
    }
    else
    {
    $answer = '';
    }
    $fetch_ans = "Select * from answers where correct = 1 AND qid = $qid";
    $result = mysql_query($fetch_ans) or die(mysql_error());
    $row = mysql_fetch_array($result);
    $id = $row['id'];
    $correctans = $row['text'];

    if('$correctans' == '$answer')
    {
    $user_score += $score;
    $qid++;
    $query = "Update users set score = $user_score  where username = '$user'";
    $res = mysql_query($query) or die(mysql_error());
    if($res) {
 
header("Location: answer.php"); 
    }
    }else
    {
header("Location: answer.php");
    }


    ?>
THIS IS answer.php and here i try to post information from test2 and test3 fields  but i am not getting any output
the output shows blank array()
and unidentified index test2
and unidentified index test3
i am not able to figure out the error
any help will be highly appreciated
and forgive me if i have made any mistakes in posting the question since i am a newbie at PHPFREAKS

Dear All Members

here is my table data..

(4 Columns/1row in mysql table)

id                 order_no               order_date                  miles
310                001                   02-15-2020                MI,108.53
                                                                                     Oh,194.57
                                                                                     PA,182.22
                                                                                     WA,238.57

How to split(miles) single column into (state, miles) two columns and output like following 5 columns /4rows in mysql using php code.

(5 Columns in mysql table)
------------------------------------------------------------------------------------

id                  order_no              order_date              state      miles

310                001                   02-15-2020               MI          108.53

310                001                   02-15-2020              Oh          194.57

310                001                   02-15-2020              PA          182.22

310                001                   02-15-2020             WA          238.57
 

------------------my php code -----------

 

<?php
//invoice.php  
include('../includes/config.php');

if(isset($_POST["add"]))
{
$order_no=$_GET['order_no'];
$order_date=$_GET['order_date'];
$miles=$_POST['miles'];

$miles = explode("\r\n", $_POST["miles"]);
$newdata = "'" . implode("','", $_POST["miles"]) . "'";
$sql ="INSERT INTO tble_states_miles(order_no,order_date, miles) VALUES(:order_no, :order_date, :newdata)";

$query = $dbh->prepare($sql);
$query-> bindParam(':order_no', $order_no, PDO::PARAM_STR);
$query-> bindParam(':order_date', $order_date, PDO::PARAM_STR);
$query-> bindParam(':miles', $newdata, PDO::PARAM_STR);

$lastInsertId = $dbh->lastInsertId();
if($lastInsertId)
{
echo "<script type='text/javascript'>alert('Added Sucessfull!');</script>";
echo "<script type='text/javascript'> document.location = 'ifta_miles_calculationlist_added.php'; </script>";
}
else 
{
$error="Something went wrong. Please try again";
}

if($query->execute()) {

$sql = "update tis_invoice set flag='1' where order_no=:order_no";
$query = $dbh->prepare($sql);
$query-> bindParam(':order_no', $order_no, PDO::PARAM_STR);

$query->execute();

}
}
?>

----------------- my form code ------------------

 

 <?php
                   $order_no=$_GET['order_no'];
        $sql = "SELECT * from tis_invoice where order_no = :order_no";
        $query = $dbh -> prepare($sql);
        $query->execute(
  array(
   ':order_no'       =>  $_GET["order_no"]
  )
 );
        $result = $query->fetchAll();
        foreach($result as $row)
?>
    
                    <form method="post">
                        <table align="center" style="width: 55%">
                        <tr><td>Invoice Number</td></tr>
                        <tr><td><input type="text" name="order_no" value="<?php echo $row["order_no"]; ?>" readonly=""></td></tr>
                        <tr><td>Invoice Date</td></tr>
                        <tr><td><input type="text" name="order_no" value="<?php echo $row["order_date"]; ?>" readonly=""></td></tr>
                        <tr><td>
                               <textarea name="miles" class="form-control" rows="10" placeholder="" required></textarea>
                           </td></tr>
                           <tr><td>
                         
                            <input type="submit" name="add" class="btn btn-primary" value="Add" />
                       </td></tr></table>
                    </form>

-- Can any one help how to correct my code..present nothing inserted on table

 

Thank You

Edited February 8, 2020 by karthicbabu

I've been poking around the Internet for the answer to this without any success.  This query APPEARS to run, but NOTHING GETS INSERTED.  The QuestionID in the Questions table is set to auto-increment, so I only need the QuestionText data for this table. the QuestionID in the Answers table is not because there might be four or five options per question.  The snippets of code under consideration is pasted below

snipped from index.php:

Code: [Select]
<form action="./newquestion.php" method="post">
Question Text:<br><input type="text" size=100 name="QuestionText" /><br><br>
 <input type="submit" value="Enter next question"/>
</form>

Then snipped from newquestion.php


mysql_select_db(quiz);
$query = mysql_query("INSERT INTO Questions VALUES ('$_POST[QuestionText]'");
$result = mysql_query($query);


Thank you all.  I'm sure I'll learn this pretty fast, but I still need a little help.

after cloasing connection of database i still got the values form database.

Code: [Select]
<?php
session_start();
/* 
 * To change this template, choose Tools | Templates
 * and open the template in the editor.
 */
require_once '../database/db_connecting.php';
$dbname="sahansevena";//set database name
 $con=  setConnections();//make connections use implemented methode in db_connectiong.php
 mysql_select_db($dbname, $con);
//update the time and date of the admin table
 $update_time="update admin set last_logged_date =CURDATE(), last_log_time=CURTIME() where username='$uname'limit 3,4";
 //my admin table contain 5 colums they are id, username,password, last_logged_date, last_log_time
 $link= mysql_query($update_time);
 // mysql_select_db($dbname, $link);
//$con=mysql_connect('localhost', 'root','ijts');

       $result="select * from admin where username='a'";

        $result=mysql_query($result);
mysql_close($con);
//here i just check after closing data baseconnection whether i do get reselts but i do, why?
echo "after the cnnection was closed";
if(!$result){
echo "cont fetch data";

}else{

   $row= mysql_fetch_array($result);
   echo "id".$row[0]."usrname".$row[1]."passwped".$row[2]."date".$row[3]."time".$row[4];
}
//  echo "<html>";
//echo "<table border='1' cellspacing='1' cellpadding='2' align='center'>";
//      echo "<thead>";
//           echo"<tr>";
//                   echo "<th>";
//                   echo ID;
//                   echo"</th>";
//                   echo" <th>";echo Username; echo"</th>";
//                    echo"<th>";echo Password; echo"</th>";
//                    echo"<th>";echo Last_logged_date; echo "</th>";
//                   echo "<th>";echo Last_logged_time;  echo "</th>";
//               echo" </tr>";
//           echo" </thead>";
//           echo" <tbody>";
//while($row= mysql_fetch_array($result,MYSQL_BOTH)){
//             echo "<tr>";
//              echo "<td>";
//              echo $row[0];
//               echo "</td>";
//                   echo "<td>";
//              echo $row[1];
//              echo "</td>";
//                  echo "<td>";
//              echo $row[2];
//               echo "</td>";
//                   echo "<td>";
//                echo $row[3];
//              echo "</td>";
//                  echo "<td>";
//              echo $row[4];
//               echo "</td>";
//            echo "</tr>";
//     }
//         echo" </tbody>";
//         echo "</table>";
//         echo "</html>";
     session_destroy();
session_commit();

echo "session and database are closed but i still get values from doatabase session is destroyed".$_SESSION['admin'];
?>

session is destroyed but database connection is not closed.

thanks

Hi,


I have set up 2 php pages

page 1 - add_entry2.php
In this page I have a invoice table created where I can dynamically add/delete rows. This has a View Bill button which takes me to page 2- add_entry3.php
In this page it shows up the rows added in page 1 in read only format, so if the user wants to modify the data that he/she entered then he must Click on <back> that i have provided in the page 2 which will direct him to page 1

Now the problem starts here
on click of Back the dynamically added rows dissappear..which is frustrating..I know its something to do with my code..but can anyone help me fix it.

One more thing is that i dont want to store the data into DB till the finalise button is clicked on page 2 so that means till page 2 is submitted nothing goes to DB from Page 1. 


I am able to retain values if I use the code Code: [Select]
<form action="add_entry2.php" name="eval_edit" method="post" format="html">
i,e if I submit back to the same page and retrieve values form $_POST


but If I use the code Code: [Select]
<input type="button" value="Back" onClick="history.go(-1);return true;">to get back to add_entry2.ph it looses all the values. Is there any other way to code the BACK link retaining my $_POST values(Do you think $_SESSION would work in this case?)

hello
I want query from one table and insert in another table on another domain .
each database on one domain name.
for example http://www.site.com $con1
and http://www.site1.com $con.

can anyone help me?
my code is :
<?php



$dbuser1 = "insert in this database";
$dbpass1 = "insert in this database";
$dbhost1 = "localhost";
$dbname1 = "insert in this database";

// Connecting, selecting database

$con1 = mysql_connect($dbhost1, $dbuser1, $dbpass1)
   or die('Could not connect: ' . mysql_error());



mysql_select_db($dbname1) or die('Could not select database');


$dbuser = "query from this database";
$dbpass = "query from this database";
$dbhost = "localhost";
$dbname = "query from this database";

// Connecting, selecting database

$con = mysql_connect($dbhost, $dbuser, $dbpass)
   or die('Could not connect: ' . mysql_error());

mysql_select_db($dbname) or die('Could not select database');

//query from database
$query = mysql_query("SELECT * FROM `second_content` WHERE CHANGED =0 limit 0,1");
    while($row=mysql_fetch_array($query)){
$result=$row[0];
$text=$row[1]."</br>Size:(".$row[4].")";
$alias=$row[2];
$link = '<a target="_blank" href='.$row[3].'>Download</a>';
echo $result;
}  
//insert into  database
mysql_query("SET NAMES 'utf8'", $con1); 
$query3= " INSERT INTO `jos_content`
 (`id`,
  `title`,
   `alias`,
    `) VALUES 
                        (NULL, 
                        '".$result."', 
                        '".$alias."', 
                       '')";
if (!mysql_query($query3,$con1))
  {
  die('Error: text add' . mysql_error());
  }


            mysql_close($con);
                        mysql_close($con1);
             


?>

Hi,

I've can use the following URL to filter the query below:

www.mysite.com?levels=PreK
...this will show me alll the PreK members.

www.mysite.com?levels=Elem
...this will show me all the Elem members.

How do I filter it to show both me BOTH the PreK and Elem members?

Do I need to change the query?

        WHERE ((user_info.Type LIKE '$Type%')
                and ((user_info.snr_First LIKE '%$name%')
                or (user_info.snr_Last LIKE '%$name%'))
      and (user_info.snr_Home_phone LIKE '$snr_Home_phone%')
    and (user_info.snre_eMail LIKE '$snre_eMail%')
    and ((user_info.PreK LIKE '$levels%')
or (user_info.Elem LIKE '$levels%')
or (user_info.MS LIKE '$levels%')
or (user_info.HS LIKE '$levels%')
or (user_info.College LIKE '$levels%')
        or (user_info.Admin LIKE '$levels%')
                or (user_info.Prvt LIKE '$levels%')))
         ORDER BY user_info.$sort LIMIT $eu, $limit ";
$result = mysql_query($query);

Thanks.

~Wayne

Hi all

I have a form which takes details from drop down menus. But what I need is a wild card if someone leaves the selected option value as "all" it adjusts the SQL query to not search that cell so it brings all entries without filtering.

My form looks like this:

Code: [Select]
<select name="area" id="area">
       <option value="all">--All areas--</option>
      <?php 
   $getareas = mysql_query (" SELECT * FROM `areas` ORDER by name ASC");
   while ($showareas = mysql_fetch_array($getareas)) { ?>
      <option value="<?php echo $showareas['id']; ?>"><?php echo $showareas['name']; ?></option>
      <?php } ?>
    </select>

My SQL query looks lie this:

Code: [Select]
$getads = mysql_query(" SELECT * FROM adverts WHERE categoryid = 1 AND areaid = '".$searchedarea."' AND makeid = '".$searchedmake."' AND modelid = '".$searchedmodel."' AND berth = '".$searchedberth."'

AND live = 1 AND approved = 1 AND paid = 1 AND dateexpired >= '".$todaysdate."' ORDER BY seller ASC , type ASC, id ASC") or die (mysql_error());

So if they select 'all" in the drop down field, the SQL query doesn't have 'AND areaid = '".$searchedarea."'' in it?

Is this possible, or can I add a wildcard into the SQL query?

Many thanks

Pete

I use AJAX method to get the value for `$month` from the year-month selection in my page.  The year-month is pass correct correctly when it gets into my PHP code. But i am not sure how do i get the value and use it for my sql condition. 

I'm trying to plot a graph using Chart JS according to the year-month selection from the user. when the user select "2021-03" all the order that is made in the month of March will be plotted into the graph. There's no data shown in my page now and i do not know how can i query it. Can anyone enlighten me how can i do it? Because i do not know what mistake did i made here. Any kind of explanation will be appreciated. Thanks!

 

This is the code that i use for year-month selection 

<div class="col-2 my-auto">
                <input type="month" id="month" class="form-control" value="<?php echo date('Y-m'); ?>">
              </div>

               <div class="col-2 my-auto">
                <button type="button" class="btn btn-info" onclick="loadchart();">
                  <i class="nc-icon nc-zoom-split"></i>
                </button>
              </div>

This is the AJAX method

 <script type="text/javascript">
function loadchart()
{
 $('#spin1').show();
 var month= $('#month').val();
  var data = {    
    month: month,
  }
  $.ajax({
    method:"GET",
    data:data,
    url:"includes/loadchart.php",
    success:function(data)
    {
        $('#loadchart').html(data);
    }
  });

}

this is my loadchart.php

<?php
include '../session.php';
if(isset($_GET['month']))
{
    $months = $_GET['month'];
?>
<?php
  $days = array();
  $gross_sales = array();
  $average_sales = array();
  $type = CAL_GREGORIAN;
  $month = date('n'); 
  $year = date('Y'); 
  $day_count = cal_days_in_month($type, $month, $year); 
  for ($i = 1; $i <= $day_count; $i++) {
      $sql = "SELECT *, SUM(purchase_price) as purchase_price FROM ordered_items WHERE DAY(order_datetime) = '$i' AND MONTH(order_datetime) = MONTH('".$months."') AND YEAR(order_datetime) = YEAR('".$months."') AND order_status = 5 ";
    $query = $conn->query($sql);
    $total = $query->num_rows;
    $row = $query->fetch_assoc();
    if($row['purchase_price'] != 0)
    {      
      $gross_sales[] = $row['purchase_price'];
    }
      
    else if ($row['purchase_price'] == 0 && $i <= date('d')) {
      $gross_sales[] = 0;
    }

    $average_sales[] =  $row['purchase_price'] / $day_count;

    $day =  $i.'/'.$month; 
    array_push($days, $day);
  }

  $days = json_encode($days);
  $daily_gross_sales = json_encode($gross_sales);
  $average_gross_sales =  json_encode($average_sales);
?>
  <script>
    const colors = {
      colorcode: {
        fill: '#51cbce',
        stroke: '#51cbce',
      },
    };
    var ctx2 = document.getElementById("attChart").getContext("2d");
    const attChart = new Chart(ctx2, {
      type: 'line',
      data: {
        labels: <?php echo $days; ?>,
        datasets: [{
          label: "Gross Sales: RM",
          fill: true,
          pointBackgroundColor: colors.colorcode.stroke,
          borderColor: colors.colorcode.stroke,
          pointHighlightStroke: colors.colorcode.stroke,
          borderCapStyle: 'dot',
          pointRadius: 5,
          pointHoverRadius: 5,
          pointStyle: 'dot',
          data: <?php echo $daily_gross_sales; ?>,
          showLine: true
        },
        {
          label: "Average Sales: RM",
          fill: true,
          pointBackgroundColor:   '#FF0000',
          borderColor: ' #FF0000 ',
          pointHighlightStroke: '#FF0000',
          borderCapStyle: 'dot',
          pointRadius: 5,
          pointHoverRadius: 5,
          pointStyle: 'dot',
          data: <?php echo $average_gross_sales; ?>,
          showLine: true
    }
        ]
      }
    <?php   
}
?>

I do not know why my query from the loadchart.php is incorrect. Please help me with this advice me on this issue thanks!

  $sql = "SELECT *, SUM(purchase_price) as purchase_price FROM ordered_items WHERE DAY(order_datetime) = '$i' AND MONTH(order_datetime) = MONTH('".$months."') AND YEAR(order_datetime) = YEAR('".$months."') AND order_status = 5 ";