Not Writing To MySql Database

Anon

Hello all,

I've run out of gas trying to figure out why this block of code is not writing to the database:

<head>
<title>Book-O-Rama Book Entry Results</title>

</head>

<body>

<h1>Book-O-Rama Book Entry Results</h1>

if( $testfield1 == "" )

{
echo "This is for nothing entered.";
exit;
}

else

{
echo $testfield1;

}

$testfield1 = addslashes($testfield1);

@ $db = mysql_pconnect("localhost", "root", "root");

if (!$db)
{
echo "Error: Could not connect to database. Please try again later.";
exit;
}

mysql_select_db("book_sc");
$query = "INSERT INTO test values ('".$testfield1."')";
$result = mysql_query($query);
if ($result)

echo mysql_affected_rows()." book inserted into database.";
}

</body>

theslinky

hi,

do you get an error with the code? if so, what is it?

Also, is there only one field in the DB "test"?

And do you have register_globals on so that $testfield1 is recognized? If not, use $_GET['testfield1'] to access the variable.

-sridhar

drsteve

Greetings. I know exactly where you got this Book-O-Rama example 🙂

I would pay close attention to Sridhar Balasubramanian's comment about checking register_globals - Welling & Thomson mention this in a few places, but they also state (probably not clearly enough, IMO) that their config has register_globals turned on, so they can use the variable names directly, and do in all their examples. Note that register_globals is OFF by default in PHP 4.2.0+. For a discussion of why this is a Bad Idea from a security point of view, and code snipets/solutions to this "problem", see

http://www.php.net/manual/en/security.registerglobals.php

Good luck!

-drsteve

Anon

Thanks to both of you, tomorrow I'll give this a whirl and post back my results.

Craig

drsteve

(Correction to the grammar of my previous post 🙂

Having register_globals turned ON is a Bad Idea from a security point of view - that's why having it turned OFF is now the default.

Sorry for any confusion 🙂

-drsteve

Anon

Thanks Steve,

Now, where do I declare the global variable? Just at the top of the insert_book.php code?

Thanks!