[RESOLVED] Edit MySQL Entry via PHP

engebretsonhost

I'm having serious issues here. My variable $_POST['email'] is ALWAYS returning "email" instead of what I put in the form. Help?

<?php

if($_POST)
{
	$cats = mysql_query("SELECT * FROM `categories` WHERE `id`='".$_POST['cat']."'");
	$cat = mysql_fetch_array($cats);
	if($cat['id']==0) echo "Invalid Category ID. Please go back and try again.";
	else
	{
		mysql_query("UPDATE `resources` SET `subject`='".$_POST['subject']."', `name`='".$_POST['name']."', `description`='".$_POST['description']."', `phone`='".$_POST['phone']."', `city`='".$_POST['city']."', `state`='".$_POST['state']."', `zip`='".$_POST['zip']."', `email`='".$_POST['email']."', `www`='".$_POST['www']."', `cat`='".$_POST['cat']."' WHERE `id`='".$_GET['id']."'");
		echo $_POST['email'];                                             // Always returns "email".  NOT what I put in the email field.
		echo "<i>".mysql_error()."</i><br>";
		echo "Entry updated successfully!";
	}
}
else
{
	$res = mysql_query("SELECT * FROM `resources` WHERE `id`='".$_GET['id']."'");
	$res = mysql_fetch_array($res);
	echo "<form method=post action=''>
		<table>
		<tr><td>Subject</td><td><input name=subject value='".$res['subject']."' /></td></tr>
		<tr><td>Contact Name</td><td><input name=name value='".$res['name']."' /></td></tr>
		<tr><td>Description</td><td><textarea name=description rows=5>".$res['description']."</textarea></td></tr>
		<tr><td>Phone</td><td><input name=phone value='".$res['phone']."' ></tr></td>
		<tr><td>City</td><td><input name=city value='".$res['city']."' /></td></tr>
		<tr><td>State</td><td><input name=state value='".$res['state']."' /></td></tr>
		<tr><td>Zip</td><td><input name=zip size=5 maxlength=5 value='".$res['zip']."' /></td></tr>
		<tr><td>Email</td><td><input name=email value='".$res['email']."' /></td></tr>
		<tr><td>Website</td><td><input name=www value='".$res['www']."' /></td></tr>
		<tr><td>Category</td><td><select name=cat>";
	$cats = mysql_query("SELECT * FROM `categories` WHERE `parent`=0");
	while($cat = mysql_fetch_array($cats))
	{
		$subs = mysql_query("SELECT * FROM `categories` WHERE `parent`=".$cat['id']);
		echo "<option value=".$cat['id'];
		if($cat['id']==$res['cat']) echo " selected=selected";
		echo ">".$cat['name']."</option>";
		while($sub = mysql_fetch_array($subs))
		{
			echo "<option value=".$sub['id'];
			if($sub['id']==$res['cat']) echo " selected=selected";
			echo ">|--".$sub['name']."</option>";
		}
	}
	echo "</select></td></tr>
		<tr><td colspan=2><input type=submit name=go value='Update Resource Entry' /></td></tr>
		</table><br><br>[<a href='?page=admin'>Back</a>]";
}

?>

djjjozsi

in the first update query, $_GET['id'] has no value...

and you must connect to the database first.

if you have this $_POST variable, you can make extract...

extract($_POST);

then you reach these posted elements as $email , $www ect.

And another tip:
use the " in the form element's name.

print "<input name=\"subject\" value=\"{$res["subject"]}\">\r";      

 //     \r will take an enter if you see it in source code.

and you did not close your form with </form>

engebretsonhost

Haha with all due respect, I'm not stupid. I am connected previously, and $_GET['id'] IS set in the file that's being accessed.

All I ended up doing is use "emailfive" instead of email, so it must have been manipulated somwhere in the process.