2 $Variables using POST ??

Cork_Skate

Hi there ..... i have on the POST method

If i have a form like this ....

<form method="post" name="name" action="result.php">

<center>Type in the First Name and Surname :<p>

<input type="text" name="firstname">&nbsp;<input type="text" name="surname"><p>

And then click Submit : <input type="submit" name="submit "value="Submit">

</center></form>

Straight forward .... takes to string values to result.php ...... can i use both of them straight away ..... i.e.

In a SELECT * FROM names WHERE first=$Firstname AND surname=$surname

Is that possible ??

Do i have to declare them on result.php .... something like

$Firstname = $POST['Firstname'];
$Surname = $POST['Surname'];

Installer

You may not have to, but you should. Also you should be aware that PHP variable names are case-sensitive.

Cork_Skate

Just wanna leave the info for someone else ....

It works fine

Here is the code for the search.php page .... just put it into the cell you want.


<table>
   <tr>
   <td>

   <form method="post" name="memname" action="result.php"><center>Type in the First Name and Surname :<p>

<input type="text" name="Firstname">&nbsp;<input type="text" name="Surname"><p>

And then click Submit : <input type="submit" name="submit "value="Submit">

   </form>
   </td>
   </tr>

</table>

And here is the code on the result.php page ...


<?php
[COLOR=blue]$username = "username";
$password = "password";
$hostname = "localhost";		
$dbh = mysql_connect($hostname, $username, $password) or die("Unable to connect to MySQL");
$selected = mysql_select_db("database",$dbh) or die("Could not select my database");[/COLOR]

$Firstname = $_POST['Firstname']; 
$Surname = $_POST['Surname']; 

$query = ("[COLOR=red]SELECT MemberNo,FIrstName,Surname,PlaceOfBirth,Nationality,ClubNo FROM member WHERE FIrstName='$Firstname' AND Surname='$Surname'[/COLOR]  ");
$result = mysql_query($query) or die(mysql_error()); 
while ($row = mysql_fetch_array($result,MYSQL_ASSOC)) {
extract($row);
echo "Member Name: $row[FIrstName] $row[Surname] <br> Birthplace: $row[PlaceOfBirth] <br> Nationality: $row[Nationality] <br> ClubNo: $row[ClubNo] <br>"; 
} 

?>

The blue text is connecting to the database.

The red text is the MySQL query.

Hope this helps !!

madwormer2

Whenever I have problems with variables being passed, I use:

extract($POST);
extract($GET);

Right at the top of the page.

This basically takes $_GET["variable1"] and turns it into $variable1. And does the same for all POST:

$_POST["variable2"] and turns it into $variable2

Um..

Also you could try using around your table and row names in the SQL query to see if that makes a difference.

(another thing, when using the extract, make sure you don't leave any variables 'open' otherwise it's exploitable)