Re: Question before I end up writing alot of extra code...
| From: | Wolf | Date: | Mon, 07 Jul 2008 20:26:56 +0000 |
| Subject: | Re: Question before I end up writing alot of extra code... | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-276415@lists.php.net to get a copy of this message | ||
Oh, and make sure you bottom post too so you actually follow everything! ;)
---- mike <mike503@gmail.com> wrote:
> doh - and mysql_escape_string or equivalent.
>
>
>
> On 7/7/08, mike <mike503@gmail.com> wrote:
> > please oh please also run that through filter_input() before throwing
> > a $_POST directly into the db query ;p
> >
> >
> > On 7/7/08, Shawn McKenzie <nospam@mckenzies.net> wrote:
> > > Jason Pruim wrote:
> > > >
> > > > MAIN PAGE:
> > > > <?PHP
> > > >
> > >
> > > echo $row['Tab']; //what do you get?
> > >
> > > > if($row['Tab'] == "done"){
> > > > $Tchecked1 = "CHECKED";
> > > > $Tchecked2 = NULL;
> > > > }else{
> > > > $Tchecked1 = NULL;
> > > > $Tchecked2 = "CHECKED";
> > > > }
> > > >
> > > > echo"
> > > > <fieldset>Tab<BR>
> > > > <input type="radio" name="rdoTab" value="done"
> > > > $Tchecked1>Done <BR>
> > > > <input type="radio" name="rdoTab" value="on"
> > > > $Tchecked2>Not Done<BR>
> > > > </fieldset>";
> > > > ?>
> > > > PROCESSING:
> > > > <?PHP
> > > >
> > >
> > > print_r($_POST); //what do you get?
> > >
> > > > $tab = $_POST['rdoTab'];
> > > > $record = $_POST['txtRecord'];
> > > > $updateQuery = "UPDATE
> > > >
current SET Tab='$tab' WHERE
> > > Record='$record'";
> > > > mysqli_real_query($link, $updateQuery);
> > > > ?>
> > > >
> > >
> > > You're saying now that that record now has field Tab=''?
> > >
> > > -Shawn
> > >
> > > --
> > > PHP General Mailing List (http://www.php.net/)
> > > To unsubscribe, visit: http://www.php.net/unsub.php
> > >
> > >
> >
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php