quick php help

adamduritz99

can you do this?

$sql = "SELECT * FROM adminsection WHERE
username = $HTTP_COOKIE_VARS["username"] AND
password = $HTTP_COOKIE_VARS["password"] AND
pin = $HTTP_COOKIE_VARS["pin"]";

i get this error:
Parse error: parse error, expecting T_STRING' orT_VARIABLE' or `T_NUM_STRING' in c:\inetpub\wwwroot\powerhosting\admin\cpanel.php on line 25

"username = $HTTP_COOKIE_VARS["username"] AND" is the line 25

peace
sean

Anon

Use a single quote for thew keys

$HTTP_COOKIE_VARS['username']

And I would use
extract($HTTP_COOKIE_VARS);

before building the query, and just use $username,$password to provide the values in the query. It just looks cleaner.

adamduritz99

hmm, could you show me completely what you mean about extract($HTTP_COOKIE_VARS)? i've never done that before. Also, i tried what you said and i still get the same error. So maybe that extract thing should work

peace
sean

Anon

Just thought of something. In your script, is the string $sql=\"SELECT, ect.
All on one line? or is it on seperate lines like in your post?

You have to build the string all on one line, or use .=

$sql = \"SELECT * FROM adminsection WHERE\";
$sql.= \" username = $HTTP_COOKIE_VARS[\'username\'] AND\";
$sql.= \" password = $HTTP_COOKIE_VARS[\'password\'] AND\";
$sql.= \" pin = $HTTP_COOKIE_VARS[\'pin\']\";

As for using extract(), it creates varibales form the keys of an associative array.
So if you have the keys as above in your query, then

extract($HTTP_COOKIE_VARS);

would allow you to build the query using $username, $password, and $pin, instead of $HTTP_COOKIE_VARS[\'username\'], ect.

Keep i mind that variable scope still applies. So if you use extract from within a function, once your function is finished running, the variables no longer exists. Using extract() doesn\'t affect the values within $HTTP_COOKIE_VARS, they will still be intact.

Also, if the variables $username, ect, already exist, they will be over written when you extract the variables from the array.

Using extract is just a preference of mine. It saves from having to type out the array name and keys so many times.