Re: Database/Email Script


Carl wrote:
Jerim79,

My reply is inline...

Jerim79 wrote:

I was able to figure out the POST issue. If you use " in the name on
the HTML form, you have to use " in the PHP script. So $_POST['FName']
didn't work but $_POST["FName"] does. (I haven't seen this mentioned
anywhere.)


I don't believe this to be true. Double quotes should be used for
parsing variables within a string.
http://www.php.net/manual/en/language.types.string.php#language.types.string.parsing
Both double and single quotes work for quoting array indexes. I would
suggest your problem is elsewhere.

The other issue I am having, besides the email issue is the database
INSERT. Here is the code:
$result = mysql_query("INSERT INTO table() VALUES($FName, $LName,
$Company, $Title, $Address, $Apt, $City, $State, $Zip, $Phone, $Fax,
$Email, $Var1, $Var2, $Var3, $Var4, $Var5)")

I know that $FName isn't the proper way to do it. However, when I set
it to $_POST["FName"] I get this error:

Parse error: syntax error, unexpected '"', expecting T_STRING or
T_VARIABLE or T_NUM_STRING in /website/test.php on line 264

You are receiving this error because when you insert the variable
$_POST["FName"] into your SQL statement, the first double quote is
ending the quotes you use to enclose your SQL statement.

You have a couple of options, but remember that It is VERY bad practice
to pass user input (POST/GET) values directly to the database.

The following page describes this problem. I strongly advise you read
the page carefully and make sure you understand it.
http://www.php.net/manual/en/function.mysql-real-escape-string.php

I did insert this command to show any database errors, but it doesn't
show any:
echo mysql_error($connection)

What was the value of your $result variable? It would be helpful to see
the relevant code.

Hope this helps,
Carl.

Carl,

I just read the links you gave me. I am certainly on board with what
they had to say. I do intend to add the functionality to the final
script. What I would like first would be to get the script working.
Right now, this is a dummy script, with access only to a blank table. I
can mess around with it as much as I want. (My boss just gave me this
task as a learning experience.) This is day 2 of my PHP learning
experience. So I am just trying to take it one step at a time. I really
do appreciate your help.

.

Relevant Pages

  • Applescript and Autoformat (search and replace), Word 2004
    ... script that will take care of a recurring editing issue with nested ... quotes to double quotes, ... set oldauto2 to auto format as you type replace quotes ... set auto format as you type replace quotes to false ...
    (microsoft.public.mac.office.word)
  • Re: Interesting Discussion with my PHP Teacher
    ... ## For a small script like this one, ... > it wher the sql statement is constructed because there are too many quotes. ...
    (comp.lang.php)
  • Re: basic help to run an application from WSH
    ... string values must be enclosed in quotes. ... The Run method will execute on c:\notepad.exe. ... I'm just learning vbscript for wsh and here is my first script, ... Also if I cut and paste the exact file path from the script into the ...
    (microsoft.public.scripting.vbscript)
  • Re: How to pass string in command line argument.
    ... > I want to pass a command argument to perl script with double quotes (" ... > just a straight string is geeting passed ...
    (perl.beginners)
  • Re: Failing File Tests?
    ... >> Are you doing this as a learning experience? ... readdir is your friend. ... programming - laziness. ... A script which uses these modules on ...
    (comp.lang.perl.misc)