Array/MySQL Question

xeonman13

Hello All,
Ive tried searching on this forever but have not been able to find anything.
I also posted on another site with no luck.

Maybe someone here can help.

I have a text area on a form where there will be several entries put in to the text area on different lines. I have it working where this is being inserted into a MySQL database and it works. However I need to submit other values as well, but these will be the same for each entry. Let me explain.

The website admin will paste codes in the text area. They are unique and will be on different lines. On the same form there will be other values. Those will duplicate on each codes database entry.

Here is what i have going on so far.
FORM:

<form id="addbulkkeys" name="addbulkkeys" method="post" action="">
 <textarea name="area" id="area" cols="45" rows="5"></textarea></td>
 <input type="submit" name="button" id="button" value="Add Keys" />
 <input type="hidden" name="addedby" id="button" value="<?php echo $userid ?;>" />
 <input type="hidden" name="addeddate" id="button" value="<?php echo $date ?;>" />
<input type="hidden" name="MM_insert" value="addbulkkeys" />  

    </form>

MySQL Statement

<?php if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "addbulkkeys")) {
mysql_connect("localhost", "dbusername", "dbpassword") or die("Connection Failed");
mysql_select_db("uno_alwayscpr")or die("Connection Failed");
$values = $_POST['area'];
$array = split("\r\n", $values);
foreach($array as $line){
   mysql_query("INSERT INTO keys_inventory(keysnumber) VALUES($line)");
}
}
?>

Right now the text area keys are getting added fine to the databse. multiple rows on the mysql db. How to I place the date value and added by on each row as well?

Derokorian

Sounds as simple as hard coding:


   mysql_query("INSERT INTO keys_inventory(user_id,date_added,keysnumber) VALUES($_SESSION[userid],NOW(),$line)");

Course it all depends on how you store the admin id that you need to add (or how you store what youw ant to add) Hopefully this gets you on the right track tho.

xeonman13

Thanks for your reply. Gave it a try. Here are the results.

$con = mysql_connect("localhost", "uname", "password");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }
mysql_select_db("uno_alwayscpr", $con);

$values = $_POST['area'];
$userid = "123";
$array = split("\r\n", $values);
foreach($array as $line){

$sql="EXPLAIN INSERT INTO keys_inventory (keyssubcategory,addedby,keysnumber) VALUES ('$_POST[keysubcategory]','$userid','$line')";
if (!mysql_query($sql,$con))
  {
  die('Error: ' . mysql_error());
  }
echo "1 record added";
}
}
?>

Getting this.
Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'INSERT INTO keys_inventory (keyssubcategory,addedby,keysnumber) VALUES ('1','123' at line 1

xeonman13

The userid="123" is only for testing as $_SESSION[userid] wasnt working.

bradgrafelman

Why are you trying to execute an EXPLAIN query?

Also, when posting PHP code, please use the board's [noparse]

..

[/noparse] bbcode tags (rather than the generic CODE tags).

xeonman13

IN an attempt to troubleshoot the issue.

xeonman13

I got it!!!!
Thanks for your help! This is definately my only for PHP from now on!

xeonman13

I meant my only FORUM

xeonman13

SORRY.
Here I go again.
Everything looked like it was working fine, but its actually duplicating every entry I insert. Any ideas why?

Here is latest code.

Form:
Text area (area) and one more hidden field (subcatid)

PHP/MySQL:

$con = mysql_connect("localhost", "DBUNAME", "DBPASSWORD");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }
mysql_select_db("uno_alwayscpr", $con);

$values = $_POST['area'];
$userid = $_SESSION['MM_Username'];
$array = split("\r\n", $values);
foreach($array as $line){

$sql="INSERT INTO keys_inventory (keyssubcategory,addedby,keysnumber) VALUES ($_POST[keysubcategory],'$userid','$line')";
if (!mysql_query($sql,$con))
  {
  die('Error: ' . mysql_error());
  }
echo "";
}
$keysaddedURL = "addedconfirmation.php";
if (mysql_query($sql,$con)){
    header("Location: " . $keysaddedURL );
}
}
?>

bradgrafelman

It inserts the data twice because you execute the INSERT query twice.

Also, user-supplied data should never be placed directly into a SQL query, else your code will be vulnerable to SQL injection and/or just plain SQL errors. Instead, you must first sanitize the data with a function such as [man]mysql_real_escape_string/man (for string data).

EDIT: Also note that [man]split/man has been deprecated. However, you don't need to use its replacement since you don't need regular expressions at all - simply use [man]explode/man instead.