Blank Page

XxDxX

Hello,

I have this php script that is supposed to update the data in my database. My problem is that when I go to the web page it is blank. http://www.codeanswers.chatspeak.net/updatecontent1.php

Here is my code:

<?
$db=mysql_connect("localhost","chatspea","pass");
mysql_select_db("chatspea_contenteditor", $db) or die ("can't connect");

$id=$_POST['id'];
$result=mysql_query("SELECT * FROM content WHERE id='$id'");

$num = mysql_num_rows($result);
$i=0;
while ($i < $num) {
$content=mysql_result($result,$i,"content");

?>

<form method="post" action="recordupdated.php" >
<input type="hidden" name="ud_id" value="<? echo "$id" ?>">
content: <input type="textarea" name="ud_content" value="<? echo "$content"?>">
<br>
<input type="Submit" value="Update">
</form>

<?
++$i;
}
?>

Does anyone know what could be my problem?

Thanks,
Dylan Alligham

devinemke

<?php
$db = mysql_connect('localhost', 'chatspea', 'pass');
mysql_select_db('chatspea_contenteditor', $db) or die(mysql_error());
$result = mysql_query("SELECT * FROM content WHERE id = '" . $_POST['id'] . "'");
$row = mysql_fetch_assoc($result);

echo '
<form method="post" action="recordupdated.php">
<input type="hidden" name="ud_id" value="' . $_POST['id'] . '">
content: <input type="textarea" name="ud_content" value="' . $row['content'] . '"><br>
<input type="Submit" value="Update">
</form>
';
?>

XxDxX

I am not getting a blank page anymore but when I press Update it goes to
http://www.codeanswers.chatspeak.net/recordupdated.php
and says: Record Updated
but it did not update the record.

Here is my recordupdated.php script:

<?php
$ud_id=$_POST['ud_id'];
$ud_content=$_POST['ud_content'];


$username="chatspea";
$password="dylan4561";
$database="chatspea_contenteditor";
$db=mysql_connect(localhost,$username,$password) or die ("Can't connect");
mysql_select_db($database, $db) or die ("can't connect 2");


$query="UPDATE content SET '$ud_content' WHERE id='$ud_id'";
mysql_query($query);
echo "Record Updated";
?>

I think it might have to do with my variables like $ud_id but I can not figure it out.

devinemke

your query syntax is wrong, change to:

$query = "UPDATE table SET content = '$ud_content' WHERE id = '$ud_id'";

i'm just guessing here at your actual table name

XxDxX

This is great! Thanks a lot! I only have one more question. How can I get the existing data to display when I go to the update page?

devinemke

what exactly is the logical flow here of your app? how does the user get to the form where they update the "content" field? do they have to login via a username/password form? the reason i ask is the way you have coded this is pretty insecure. the primary key field (id) is passed as a hidden form field. what is to stop me from logging in, going to your update form, then changing the hidden field to something other number then submitting the form thereby up dating somebody elses database record?

i suggest you look into using sessions. this is a more secure way of preserving data accross multiple page accesses.

XxDxX

Originally posted by devinemke
what exactly is the logical flow here of your app? how does the user get to the form where they update the "content" field? do they have to login via a username/password form? the reason i ask is the way you have coded this is pretty insecure. the primary key field (id) is passed as a hidden form field. what is to stop me from logging in, going to your update form, then changing the hidden field to something other number then submitting the form thereby up dating somebody elses database record?

i suggest you look into using sessions. this is a more secure way of preserving data accross multiple page accesses.

Right now I am just testing. There is no security what so ever. I will add the security after I figure out how to do what I need to do(when I go to edit the page I want to see the content in the textare). Also this is just for me to update the content of the site, so I will be the only one using this program.