Mysql and PHP Problems

hcaz32000

Hello,

I am trying to build a program that will allow users to submit there website to my directory. I have all of the code done. But the last part of the program will not insert the information into the database.

I have created an admin section so I can choose which one's I want to go into the database and which one's I don't want and be able to delete.

I've tried this two differnet ways. The first way is I added the INSERT INTO ... into the value tag of select form element. That did not work. Then I tried an If statement with if ($value = 1) ($value2 = INSERT INTO....) then I had another if statement that said if ($value = 2) ($value2 = DELETE Where...) (this is not exact code) None of the above work. So i have the code down here for webadmin.php and add_resource.php. If any one could help me find away with an select tag in the form to insert or delete it would be a big help.

$fred = 0;
/ declare some relevant variables /
$DBhost = "";
$DBuser = "";
$DBpass = "";
$DBName = "";
$table = "web_submit";

mysql_connect($DBhost,$DBuser,$DBpass) or die("Unable toconnect to database");
@mysql_select_db("$DBName") or die("Unable to select database $DBName");
$sqlquery = "SELECT * FROM $table LIMIT 10";

$result = mysql_query($sqlquery);
$number = mysql_numrows($result);

$i = 0;

if ($number < 1) {
print "<CENTER><P>There Were No Results for Your Search</CENTER>";
}
else {
while ($number > $i) {
$id = mysql_result($result,$i,"id");
$url = mysql_result($result,$i,"url");
$description = mysql_result($result,$i,"description");

print "<form method='post' action='add_resource.php'>";

print "<table width='100%'>";
print "<tr>
<td width='25%'><center><input type='hippen' name='id' value='$id'></center></td>
<td width='25%'><center><input type='text' name='url' value='$url'></center></td>
<td width='25%'><input type='text' name='description' value='$description'></td>
<td width='25%'><select name='value'><option value='INSERT INTO webmaster VALUES ('$id','$url','$description')'>INSERT</option><option value='2'>Delete</option></select></td>
</tr>";
print "</table>";

print "<center><input type='submit' name='submit' Value='Add'></center>";

print "</form>";
$i++;
}
}
?>

add_resource.php

/ declare some relevant variables /
$DBhost = "";
$DBuser = "";
$DBpass = "";
$DBName = "";
$table = "webmaster";

mysql_connect($DBhost,$DBuser,$DBpass) or die("Unable toconnect to database");
@mysql_select_db("$DBName") or die("Unable to select database $DBName");
$sqlquery = "$value";

$results = mysql_query($sqlquery);

mysql_close();

print "<HTML><TITLE> PHP and MySQL </TITLE><BODY
BGCOLOR=\"#FFFFFF\"><center><table border=\"0\"
width=\"500\"><tr><td>";
print "<p><font face=\"verdana\" size=\"+0\"> <center>You
Just Entered This Information Into the
Database<p><blockquote>";
print "ID : $id<P> URL : $url<P> Description : $description </blockquote></td></tr></table>
</center></BODY></HTML>";
?>

Thanks,

gabereiser

it's mysql_pconnect not mysql_connect

jim_keller

it's mysql_pconnect not mysql_connect

mysql_pconnect() is for persistent connections, which will "try to find a (persistent) link that's already open with the same host, username and password. If one is found, an identifier for it will be returned instead of opening a new connection. " (php.net)

mysql_connect() will also work, but will close the connection after the script's execution (which may or may not be what you want).

-Jim Keller
http://www.centerfuse.net

jim_keller

you should never include your SQL query in the HTML form, as it is subject to be edited by a user.
you reference the variables $id, $url and $description in your query, but they won't be defined until the form
is submitted.

first, change
<option value='INSERT INTO webmaster VALUES ('$id','$url','$description')'>INSERT</option>
to
<option value='insert'>Insert</option>

then try this in add_resource.php

/ (Connect to the database) /

$id = $POST['id'];
$url = $POST['url'];
$description = $_POST['description'];

/ (You should also add some validity checking here for the user input) /

if ( $_POST['value'] == 'insert' ) {
$sql_query = "INSERT INTO webmaster VALUES('$id', '$url', '$description')";
$result = mysql_query( $sql_query );
}

hcaz32000

Hello,

thanks for the reply. I'm going home tonight to work with it. My question is how do i do the delete function. I want to be able to delete the contains out of web_submit if i do not apporve of the website. Oh webadmin.php is not for the user. It is for me and me only. I'll probably put a password protection on it.

My objective is just to get the data into the database. Thanks again for the help.

hcaz32000

Hey everyone I need another idea the last one didn't work at all