Updating row on mysql php -

-

i want update row on table , not updating. html , php code : 

<?php if ($_get) {     if (isset($_get['id'])) {         $id = preg_replace('#[^0-9]#', '', $_get['id']);         echo $id;         $query = "select * posts id='{$id}'";         $result = mysqli_query($connect, $query);         $rows = mysqli_fetch_assoc($result);     } elseif (empty($_get['id'])) {         header("location: manage_posts.php");     } } ?> <form action="modify_post.php?id=<?php echo $id; ?>" method="post">     <h3>post title <?php //echo $id; ?></h3>     <input name="title" value="<?php echo $rows['title'];?>" type="text" placeholder="title here ..." id="title" required>     <h3>post content</h3>     <textarea name="content" required  placeholder="title here ..." style="resize: none"><?php echo $rows['content'];?></textarea>     <br/>     <input type="submit" value="update" id="submit"/> </form> <?php if ($_server['request_method'] === 'post') {      if ($_post['title'] != "" || $_post['content'] != "") {         $id = preg_replace('#[^0-9]#', '', $_get['id']);         $sql = "update posts set title='{$_post['title']}', content='{$_post['content']}' id='{$id}'";         $update_result = mysqli_query($connect, $sql);          if (isset($result)) {             echo "<h2>update successfully, redirecting ...</h2>";         } else {             echo "record hasn't been updated" . mysqli_errno($result);         }          header("location: manage_posts.php");     } else {         echo "<h3>please fill fields</h3>";     } } ?>

this came !

i don't know problem coming ?

a) avoid sql injections e.g. prepared statements + parameters
b) add more error handling , parameter checking.

<?php if ($_server['request_method'] !== 'post') {     echo 'wrong method'; } else if ( !isset($_post['title'], $_post['content']) ) {     echo 'missing post parameters'; } else if ( !isset($_get['id']) ) {     echo 'missing parameter'; } else if ($_post['title'] == "" || $_post['content'] == "") {     echo '<h3>please fill fields</h3>'; } else {     $stmt = $connect->prepare('update posts set title=?, content=? id=?');     if ( !$stmt ) {         trigger_error('prepare failed', e_user_error);     }     else  if ( !$stmt->bind_param('sss', $_post['title'], $_post['content'], $_get['id']) ) {         trigger_error('bind_param failed', e_user_error);     }     else if ( !$stmt->execute() ) {         trigger_error('execute failed', e_user_error);     }     else {           echo '# of updated rows: ', $stmt->affected_rows();     } }

see


Comments

Post a Comment

Popular posts from this blog

php - Admin SDK -- get information about the group -

-
please, help. https://www.googleapis.com/admin/directory/v1/groups/106274944935548788283 sending request obtain information group id 1062 ... here link method in google https://developers.google.com/admin-sdk/directory/v1/guides/manage-groups#get_group in response error - 401 unauthorized. oauth authenticate via user has received rights necessary request, included in console admin sdk. authorization successful, there token. not can not understand. if not hard - response. requested information: file_get_contents("https://www.googleapis.com/admin/directory/v1/groups/1062749‌​44935548788283?key=aizasybruhiomdf9nlx9lx3imxwesqmcrnhh4l4"); id group - "106274944935548788283" key applications in case - "aizasybruhiomdf9nlx9lx3imxwesqmcrnhh4l4" error: failed open stream: http request failed! http/1.0 401 unauthorized
Read more

dns - How To Use Custom Nameserver On Free Cloudflare? -

-
i have problem. i own small hosting company. trying add cloudflare site free cdn. problem when sign have change nameservers nameservers. have nameserver dns set through godaddy, how add them cloudflare? main site uses company's nameservers whenever add them site goes offline. when go cloudflare's dns records click on dropdown, click ns, , there's 2 boxes 'name' , 'nameserver'. mean input 'ns1' 'name' , 'ns1.domain.com' 'nameserver'? input server's ip addresses? is there way of accomplishing free version of cloudflare? that impossible. option have custom name servers available on business , enterprise. see https://www.cloudflare.com/plans . also, might mistaken. must change name servers in domain register settings, not on cloudflare.
Read more

Python Error - TypeError: input expected at most 1 arguments, got 3 -

-
can explain why can not use your_name in goal variable? my_name = "bryson" my_age = 29 your_name = input ("what name? ") your_age = input ("what age? ") print ("my name is", my_name,", , am", my_age, "years old.") print ("your name is", your_name,", , are", your_age,".") print("thank buying book,", your_name,"!") goal = input ("what favorite part of book,", your_name, "?") print("awesome!") the error is: goal = input ("what favorite part of book,", your_name, "?") typeerror: input expected @ 1 arguments, got 3 you got error because in fact gave 3 arguments input function when expecting 1 (namely, string prompt). in input ("what favorite part of book,", your_name, "?") ---------------------------------------- , ---------, --- the underlined parts comma-separated arguments: st...
Read more