Re: [PHP-DB] Newbie Question $2
[email protected] (Jim Giner) Wed, 18 Jun 2014 14:49:03 -0400
| Newsgroups | php.db |
|---|---|
| Message-ID | <[email protected]> |
On 6/18/2014 2:16 PM, Aziz Saleh wrote: > On Wed, Jun 18, 2014 at 2:13 PM, Karl DeSaulniers <[email protected]> > wrote: > >> >> >> Sent from losPhone >> >>> On Jun 18, 2014, at 7:56 AM, Jim Giner <[email protected]> >> wrote: >>> >>>> On 6/18/2014 12:31 AM, Ethan Rosenberg, PhD wrote: >>>>> On 06/17/2014 12:02 PM, [email protected] wrote: >>>>> Hi Ethan, >>>>> >>>>> Here are some things to clean up your code: >>>>> >>>>> Your line: >>>>> >>>>> $phn = $_POST[phone]; >>>>> >>>>> should use quotations as follows: >>>>> >>>>> $phn = $_POST['phone']; >>>>> >>>>> Your line: >>>>> >>>>> $sql1 ='select Lname, Fname from Customers where Phone = $Phn '; >>>>> >>>>> Should use double quotes if you need the variable to be interpreted: >>>>> >>>>> $sql1 ="select Lname, Fname from Customers where Phone = $Phn "; >>>>> >>>>> Lastly, as people have mentioned PDO is probably the best way to go. >>>>> Try connecting to your database with PDO. Look on Google for "PDO >>>>> prepared statements" and use those instead of the mysql escape string >>>>> method. >>>>> >>>>> Hope this helps, >>>>> >>>>> -Kevin >>>>> >>>>> Sent from Yahoo Mail on Android >>>> IT WORKS!!! >>>> >>>> Here is the code - >>>> >>>> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" >>>> "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> >>>> <html xmlns="http://www.w3.org/1999/xhtml"> >>>> >>>> <html> >>>> <?php >>>> $bla = 1; >>>> ?> >>>> <head> >>>> </head> >>>> <body> >>>> <div align="center"> >>>> <form method="post"> >>>> <input type='text' name=phone></input> >>>> <input type='submit'> >>>> <br /><br /><br /> >>>> </form> >>>> </div> >>>> <?php >>>> error_reporting(-1); >>>> require '/home/ethan/PHP/ethan.inc'; >>>> $db = "Store"; >>>> $cxn = mysqli_connect($host,$user,$password,$db); >>>> >>>> $phn = $_POST[phone]; >>>> $phn = (string)$phn; >>>> $dsh = '-'; >>>> $Phn = >>>> >> $phn[0].$phn[1].$phn[2].$dsh.$phn[3].$phn[4].$phn[5].$dsh.$phn[6].$phn[7].$phn[8].$phn[9]; >>>> >>>> $sql1 ="select Lname, Fname from Customers where Phone = >>>> '$Phn' "; >>>> $result1 = mysqli_query($cxn, $sql1); >>>> if(!$result) >>>> { >>>> ?> >>>> <div align="center"> >>>> >>>> <strong>No Match Found</strong> >>>> <br /><br /> >>>> </div> >>>> <?php >>>> } >>>> >>>> ?> >>>> <div align="center"> >>>> <table border="4" cellpadding="5" cellspacing="55" >>>> rules="all" frame="box"> >>>> <tr class='heading'> >>>> <th>Last Name</th> >>>> <th>First Name</th> >>>> <?php >>>> >>>> while($row1 = mysqli_fetch_row($result1)) >>>> { >>>> >>>> $Lname = $row1[0]; >>>> $Fname = $row1[1]; >>>> >>>> >>>> >>>> ?> <tr> >>>> <td> <?php echo $Lname; ?> </td> >>>> <td> <?php echo $Fname; ?> </td> >>>> </tr> >>>> <?php >>>> } >>>> ?> >>>> </table> >>>> </div>> >>>> </body> >>>> </html> >>>> >>>> As you [those that replied] accurately noted, the problem was with the >>>> quoting. >>>> >>>> I appreciate all your comments, take them seriously and will use the >>>> information contained in them for future programming. >>>> >>>> No matter how much skill in programming I have, I will remain a NEWBIE; >>>> ie, someone who wishes to grrow in knowledge and acknowledges that there >>>> are many programmers much more skilled than I. >>>> >>>> Thanks again. >>>> >>>> Ethan >>> happy to hear you got it working. Sad to see that you didn't heed the >> tips provided to you and alter your code, and that you still have errors in >> it. oh, well.... >>> >> >> Wow. Just wow. I though when I signed up on this list that if I did what >> Ethan did I would be shunned from the list. But I guess I was wrong. You >> can be an ask hole on here and people will still try and help. Kudos to the >> good souls who try. >> >> Karl >> -- >> PHP Database Mailing List (http://www.php.net/) >> To unsubscribe, visit: http://www.php.net/unsub.php >> >> > There are lots of people who have free time on their hands to teach the > basics, which I think is a good thing. Personally, if someone doesn't care > enough to read the manual or attempt to understand the basics, I wouldn't > spend too much time on their problems. > And despite Ethan's continual ignorance of the manual and the basic principles espoused by those taking the time to respond to him we still do it. Aren't we all amazing?