simple sql (update)

[chinni_77]

Hello

I am trying to change the password of an user by referring the user name.

could somebody pls tell me where the error is, itz driving me nuts.

<?
include "dbconnection.ini";
	if ($submit){
    if ($newpassword <> $newpassword2){ 
        echo "passwords do not match. please re-enter passwords!"; 
    //exit;
    }else{ 
         $sql="update TBL_USER set USER_PASSWORD= md5($newpassword) where USER_NAME ='admin'";

     $result=ibase_query($connection,$sql); 
}
if (!$result){ 
    echo "Change update did not take place. Please retry"; 
}else { 
    echo "Password successfully changed!"; 
} 

} else {
echo"<form action=\"$PHP_SELF\" method=\"POST\">\n";
echo"New password:<input type=\"password\" name=\"newpassword\"><br> ";
echo"Repeat new pasword:<input type=\"password\" name=\"newpassword2\"><br> ";
//echo"<input type=\"hidden\" value=\"$USER_NAME\" name=\"username\">";
echo"<input type=\"submit\" value=\"submit\" name=\"submit\">";
echo"</form></body></html>"; 
}

?>

[MrAlaska]

1) When writing your code, make sure you have PHP echo back
any SQL errors. I don't know the syntax for doing so with ibase,
but with mysql your database hits look more this:

$result=mysql_query($sql)
or die ("Sql prob:".$sql."<p>".
mysql_errno().": ".mysql_error());

That way, if you do something silly like leave a couple quotes off
of a text entry in a SQL statement, it will show right up.

2) When asking for help on the forum, posting the relavent code
is good, you did that, but it also helps to explain the problem you
are having rather than just say 'it doesn't work'. Sometimes, you
might find somebody had a very similar problem and it turned out
to be as simple as leaving the quotes off a text entry in the
sequel statement.

3) If the code parses but doesn't perform properly, follow the
logic through the page step by step. If you are making database
hits and not echoing back your errors, make sure all the proper
connections are being made in the proper sequence. Check your
sql statement carefully. A missing field in the where clause will
not generate an error. If you are not echoing errors back, also
check the syntax of your SQL statement carefully. Something as
simple as leaving the quotes off a text entry in the SQL
statement is easily overlooked but will stop your application dead.

[chinni_77]

OK.here is my error:

Error SQL error code = -804 Function unknown MD5

any ideas?

thank you

[MrAlaska]

It seems Ibase handles things different than MySql, did you try entering it without the MD5 wrapper?

[chinni_77]

hmm...i guess i cant do it, because i want to store my new password in the encrypted form and more over the exsisting password in my table is also in the encrypted form.

[MrAlaska]

You are in debugging mode now. Simplify it to get it working, then
add the functionality you need.

[Weedpacket]

Originally posted by chinni_77
OK.here is my error:

Error SQL error code = -804 Function unknown MD5

any ideas?

thank you

Yes, your database server doesn't know what the md5() function is supposed to do.

I presume you're wanting PHP to do the md5. In that case you have to get it out of the string (and remember to quote the result in the string):

  $sql="update TBL_USER set USER_PASSWORD= '".md5($newpassword)."' where USER_NAME ='admin'";

See how easy it can be when you follow Point (2)?🙂And read the error message?