error please help

[k994519]

HI guys I am getting this error can you please help

/************************
Parse error: parse error, unexpected T_ENCAPSED_AND_WHITESPACE, expecting T_STRING or T_VARIABLE or T_NUM_STRING in c:\program files\apache group\apache\htdocs\getdata.php on line 12
/***********************************/

here is the code

first the html code which leads on the php form

<form method="POST" action="getdata.php"> 
Enter User Number:  <input type="text" name="num"><br> 
<input type="submit"> 
</form> 

<input type="hidden" name="id" value="$_POST['num']"> 
<?php 

if(!isset($_POST['num'])) 
{ 
    echo "Incorrect usage of script."; 
    exit(); 
} 

$query = "SELECT * FROM students WHERE student_id = $_POST['num']"; 
$res = mysql_query($query); 
if(!mysql_num_rows($res)) { 
    echo "User ID Not Found."; 
} else { 
    $data = mysql_fetch_row($result); 

echo <<<END 
    User Info for {$data[0]}<br> 
    <form method="POST" action="whatever.php"> 
    <input type="text" name="firs_tname" value="{$data[1]}"><br> 
    <input type="text" name="last_name" value="{$data[2]}"><br> 
    <input type="text" name="faulty_id" value="{$data[3]}"><br> 
    <input type="text" name="course_id" value="{$data[4]}"><br> 
    <input type="text" name="current_level" value="{$data[5]}"><br>
	<input type="text" name="Date_started" value="{$data[6]}"><br>
	<input type="text" name="Group_id" value="{$data[7]}"><br>

<input type="submit"> 
</form> 
END; 

?> 

[Pig]

You are missing a final closing brace.

[bubblenut]

on this line
$query = "SELECT FROM students WHERE student_id = $POST['num']";
remove the quotes in the POST array to give you this.
$query = "SELECT FROM students WHERE student_id = $POST[num]";
When using arrays in strings you don't use the quotes around the index (NB, you do in all other situations)
HTH
Bubble

[laserlight]

When using arrays in strings you don't use the quotes around the index (NB, you do in all other situations

Actually, the way I interpret it, you're supposed to use quotes to delimit the index.
Otherwise the PHP parser will look for a constant first, but wont give a notice because the whole variable is within a string anyway.

The correct syntax would then be:
$query = "SELECT FROM students WHERE student_id = {$POST['num']}";
But to avoid potential SQL injection:
$query = "SELECT FROM students WHERE student_id = '{$POST['num']}'";
And perhaps even:
$query = "SELECT * FROM students WHERE student_id = '{$_POST['num']}'";

But that's besides the point, which I believe Pig probably has got right.
Hard to say though, when the script looks incomplete.

[k994519]

Hi guys

I am getting this error now.....

Warning: mysql_query(): supplied argument is not a valid MySQL-Link resource in c:\program files\apache group\apache\htdocs\getdata.php on line 13
checkPass fatal error: ..... error marked with a start.......

 <input type="hidden" name="id" value="$_POST['num']"> 
<?php 
global $link;

if(!isset($_POST['num'])) 
{ 
    echo "Incorrect usage of script."; 
    exit(); 
} 

*$query = "SELECT * FROM students WHERE student_id='$num'"; 

$result=mysql_query($query, $link)
		or die("checkPass fatal error: ".mysql_error());

// Check exactly one row is found:
if(mysql_num_rows($result)==1) {
	$row=mysql_fetch_array($result); 
	return $row;
}
//Bad Login:
return false;
 // end func checkPass($login, $password) 
?> 

   // User Info for 
    <form method="POST" action="whatever.php"> 
	<?php print isset($_POST["num"]) ? $_POST["num"] : "" ;?>
	<input type="text" name="student_id" value="{$data[0]}"><BR>";

<input type="text" name="first_name" value="{$data[1]}"><br> 
<input type="text" name="last_name" value="{$data[2]}"><br> 
<input type="text" name="faulty_id" value="{$data[3]}"><br> 
<input type="text" name="course_id" value="{$data[4]}"><br> 
<input type="text" name="current_level" value="{$data[5]}"><br>
<input type="text" name="Date_started" value="{$data[6]}"><br>
<input type="text" name="Group_id" value="{$data[7]}"><br>

<input type="submit"> 
</form> 
<?

?>