Script question?

Anon

Hi all,
What i want to do is pass the correct value from the hidden field so that add_new_cat2.php can be executed. At the moment the value passed always equals "0".
How do i get the value to correspond with the CatID?
I hope this makes sense, if not feel free to ask me questions in the hope that i can better explain it.

<?
$link = mysql_connect('localhost', '', '');
mysql_select_db('melb');
$query = "SELECT * FROM categories WHERE CatParent = $id";
$result = mysql_query($query);
if(mysql_num_rows($result) == 0){

echo "There are no sub-categories";

} else {

while ($row = mysql_fetch_array($result)) {

echo "{$row['CatName']} - <a href=\"melb_edit_cat1.php?id={$row['CatID']}\">Edit</a> \n";

}

}
?>

Add new sub-category: 
<hr>
<form method=post action="add_new_cat2.php">
Sub-Category Name: 
<input type=text name=CatName maxlength=30 size=25> 
<input type=submit value="SUBMIT">
<input type="hidden" name="CatID" value="$id">
</form>

}
else
{
echo "You are not logged in.";
echo "Only logged in members may see this page.";
}

echo "<a href=\"melb_members.php\">Back to main page</a>";

Anon

value="<? print $id; ?>">

Diego

Anon

It still inserts "0" into the database.
If i were to put the value="3" (assuming that was the corresponding CatID) everything would obviously work fine.
Basically i need the CatID to equal the current $id

Anon

Where on this page is $id getting set? If it's coming from a form on another page, what's the name given to the form field there?

Anon

This is part of my script from the previous page. When the user clicks on a link they are taken to the form page (ie. the script from the fist post)
$query = "SELECT * FROM categories WHERE CatParent=1 ORDER BY CatID";
$result = mysql_query($query);
while($row = mysql_fetch_array($result)){
echo "<a href=\"melb_edit_cat2.php?id={$row['CatID']}\">{$row['CatName']}</a> \n";
}
The {$row['CatID']} is the value i need to send in the hiiden field.
Any ideas?

Anon

Okay; that looks fine from here - does the right value for $id show up in the URL when the link is followed?

And in the query where you use the value of $id, you could check the value of $query before you send it to the databse.

Another thought occurs to me; perhaps you have register_globals turned off in your php.ini, and warning message reporting turned down so that PHP doesn't warn about undefined variables. (A better config IMO is to leave register_globals off, but turn message reporting back up).

If that is the case, head up mel_edit_cat2.php with a line reading
$id=$HTTP_GET_VARS['id'];

Turning register_globals off is a performance measure and security precaution; it helpt to ensure that variables only get their values from known sources (in this case, the GET fields in the URL).