Re: Multiple MySQL INSERT

ddg2sailor wrote:

Hi People My real problem is that I dont know code. I can sort of edit it in a sloppy more or less works fashion. Any help would be great. This is the code Im having problems with: //Example// $id = 0 + $_GET["id"]; $md5 = $_GET["secret"]; $gig = 1; $giveupload = $gig*1024*1024*1024; $res = mysql_query("SELECT passhash, editsecret, status FROM users WHERE id = $id"); $row = mysql_fetch_array($res);

$res = mysql_query("SELECT passhash, editsecret, status FROM users WHERE id = $id"); $row = mysql_fetch_array($res);

I hope this is a copy/paste error or are you running the same thing twice?

mysql_query("UPDATE users SET status='confirmed', uploaded = $giveupload ");

This updates *every* user to have a confirmed status. Probably not what you want. Add a WHERE id='X'; clause

//send pm to new user {

        $msg = sqlesc("Hello and welcome to Cyber Drive In you have been

given a 1gb head start to help your ratio. .we are a strict but fair site and our warning are based on the torrent ratio not the global just because you have a good ratio dont mean you can hit and run if you do hit and run your downloads maybe disabled even if your global ratio is fine..so enjoy our free 1gb gift rules are seed what you take or for 72 hours..plz read the rules and facts now you have joined our friendly community");

        $added = sqlesc(get_date_time());
        $subject = sqlesc("Welcome to Cyber Drive In");
        mysql_query("INSERT INTO messages (sender, receiver, subject, msg,

added) VALUES (0, $id, $subject, $msg, $added)");

What is the sqlesc function? You need quotes around your values: $sql = "insert into table(f1, f2, f3) values ('" . mysql_real_escape_string($value_1) . "', '" . mysql_real_escape_string($value_2) . "')"; -- Postgresql & php tutorials http://www.designmagick.com/