Sending variable for MySQL query.

Anon

Hi,

I am trying to send a variable for a MySQL query from a form using a list menu. I have tested the queries directly in MySQL and they work fine, but when I send them from the form it doesnt work. I am thinking maybe there is an error in my syntax. Any help would be greatly appreciated.

Here is a code sample for the sql query:

$sql = "select $table1.quote, $table1.date, $table1.customer, $table1.value, $table1.quoted, $table1.last_review, $table1.status
from $table1, $table2
where find_in_set($table1.territory,$table2.territory)>0 and $table2.login =\"$login\" $condition"
;

Here is a code sample for the form (note the form reloads the page):

<form method="post" action="listquote.php">
<select name="condition">
<option value="">All quotes</option>
<option value="and $table1.status=\"pending\"">All quotes
pending</option>
</select>
<input type="submit" name="Submit" value="Go!">
</form>

Any ideas would be greatly appreciated.

Many thanks

Clive

matto

some suggestions:

$table1 is known when your form is generated. once it is submitted, I think the value is lost because you don't have it "conserved" in a hidden input:
<input type=hidden name=table1 value=<?=$table1 ?>>
I don't use mysql but under postgresql, I can't enter literals in double quotes; I have to use single ones.

hope that helps

Anon

hmm .. this is a general tip for this kind of thing .. but if your doing rough mock up or debug work .. its often a good idea to include a print of any strings you generate server side with the html your script is generating so you can see what the php is sending to the server

if it goes bang just comment the mysql_query call and get a print of the query string

Anon

Ant & Matto,

Thanks for the tips. I found exatly what the problem was using print to get the sql query on screen.

I have ammended the form to this using single quotes instead of double quotes for enclosing the argument for the MySQL query.

New code:

<form method="post" action="<?php $PHP_SELF ?>">
<select name="condition">
<option value="">All quotes</option>
<option value="and quote.status='pending'">All quotes
pending</option>
</select>
<input type="submit" name="Submit" value="Go!">
</form>

I will aslo work on matto's suggestions because to get it to work I had to remove the $table1 string and replace it with it's actual required value.

Having to work fast because the project needs to be completed by next Tuesday.

Thanks again

Anon

Hi,

All working now. $table1 wasn't getting lost I just didnt use correct syntax.

The corrected working code is:

<form method="post" action="<?php $PHP_SELF ?>">
<select name="condition">
<option value="">All quotes</option>
<option value="and <?=$table1 ?>.status='pending'">All quotes
pending</option>
</select>
<input type="submit" name="Submit" value="Go!">
</form>

Many thanks again

Clive