Strange problem with php5 and mysql 5

sangaiah

We are on,
RHEL5
PHP 5.1.6
MYSQL 5.0.45

Facing strange issues while executing queries from PHP.....

Below is the insert query in the code base,

db_query("insert into fom_orders (login, membership, total, giftcert_discount) values ('".addslashes($userinfo['login'])."', '".addslashes($mem_ship)."', '$current_order[total_cost]', '$giftcert_discount')");

And below is the sql error logged,

insert into fom_orders (, membership, total, giftcert_discount) values ('jdenucci', 'Daily Printing, Inc.', '10.0000', '0.0000');

It can be clearly see above that the 'login' field name is missing and hence the sql error.

NOTE: We recently upgraded from RHEL3 (PHP4,Mysql3) to RHEL5 (PHP5, Mysql5)
and only after this we are facing just issues......

Can anyone please tell how the typed in code gets missed sometimes?!!!

Thanks
Sangaiah

devinemke

perhaps your script is relying on register_globals being ON and now after your upgrade it is OFF

sangaiah

devinemke;10912120 wrote:
perhaps your script is relying on register_globals being ON and now after your upgrade it is OFF

Hi,

register_globals is turned OFF in both old and new environment...

Thanks for reply....

Regards,
Sangaiah

laserlight

The problem I see is that the missing part is part of the literal portion of the string. By right, it is impossible for it to be missing, regardless of quirks in a working PHP configuration.

By the way, addslashes() is likely to be incorrect. You should be using the appropriate escaping function provided by your database interface wrapper.

sangaiah

sangaiah;10912701 wrote:
Hi,

register_globals is turned OFF in both old and new environment...

Thanks for reply....

Regards,
Sangaiah

Hi devinemke,

You want me to turn ON register_globals.

Thanks,
Sangaiah

devinemke

sangaiah;10912806 wrote:
Hi devinemke,

You want me to turn ON register_globals.

Thanks,
Sangaiah

no, i do not want you to do that. if you follow the link i provided in my initial post you would see why that is a very bad idea.