Yikes! All that code I wrote way back when is really insecure. I even put it on an SSL connection and everything, but it doesn't even matter. Yikes! Glad I don't work there anymore.
Well, I definetelly don't want to turn globals back on, as I think I should re-learn the correct way, It's probably best I had this hiatus so I could forget ;-)
Now, I've changed my script over to use the $_POST stuff, but for some reason it sill doesn't display anything.
The script is setup like this in psuedo code
connect to DB
if (form was empty){
print "normal page";
}else{
do a sql query;
count the rows of the sql query;
if (the rows were less than 1){
print "the thing you searched for was not found";
print "the form again";
}else{
print "the thing was found";
}
}
disconnect from DB
The part that is broken is where it says the thing you searched for was not found. I know that the value is there, because it does do the sql query. How do I know you ask? Because I build the DB and I haven't finished the last part where the thing was found. If I input something I know is in the DB I just get a blank page. If I don't put anything in I get the intial page. So I know that it is getting a value.
I've attached the script