How do I select and display an entire MySQL table from a menu ?

Headache

Hello,

I have a HTML form file (let's say select.html) in which there is a menu. The menu allows me to select a specific table from a MySQL database.

The script that is called when the "Process" button is pressed is "browse.php". This PHP file is supposed to pick-up the name of the table selected in the menu, and display the entire content of the table on screen.

Small problem, this doesn't work !

I know how to display an entire table with "select * from table", that is not the question.

What I am interested to know is if anybody knows about a good on-line tutorial that I could follow to understand how to do this ?

Alternatively if you have done something similar, then I'll be interested in the code.

In advance thank you.

bastien

as it should be fairly straightforward....

Headache

Here are the HTML + PHP files stripped of all the fancy stuff.

Hope this will do.

select.html

<HTML>
<title>Select Menu</title>
<BODY>

<HR></HR>
<form action="browse.php" method="post">
1. Select documents to display: <select name="tablename">
<option value="france">France</option>
<option value="usa">USA</option>
<option value="russia">Russia</option>
<option value="ukraine">Ukraine</option>
</select>
<P></P>2. And press the button to validate:
<input type="submit" value="Show documents">
</form>

</BODY>
</HTML>

browse.php

<HTML>
<title>Browse</title>
<BODY>

<?php
//connect
require_once('DB.php');
$db = DB::connect("mysql://headache@localhost/archives");
if (DB::iserror($db)) {
echo "Error: could not connect to database. Please try again later.";
die($db->getMessage());
}

$tablename = addslashes($tablename);

//issue the query
mysql_select_db("archives");
$sql = "SELECT * FROM $tablename";

$q = $db->query($sql);
if (DB::iserror($q)) {
die($q->getMessage());
}

//generate the table
while ($q->fetchInto($row)) {
?>

<?=$row[0] ?>
<?=$row[1] ?>
<?=$row[2] ?>

</HTML>

------------------------------------------------------------------------EOF

bastien

table name off..

if you echo the $sql it should read

"select * from \france\" correct?

the idea behind the addslashes is to safeguard the DB against malicious use...

but how about this for a cure:

$tables=mysql_list_tables($D😎;

$numtables=mysql_num_rows($tables)

for($x=0;$x<$numtables;$x++){
if ($tablename==$tables[$x]{
//do query on table from your code
}else{
echo "not a valid parameter";
//some more redirection or whatever
}
}

what the idea here is, is to look at all the table names and match it to the submitted item....if it matches run your code to show the data...if not don' execute anything against the DB

also remove the addslashes($tablename)

hth