Re: going blind for looking...need eyes
| From: | Daniel Brown | Date: | Fri, 06 Feb 2009 17:52:06 +0000 |
| Subject: | Re: going blind for looking...need eyes | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-287834@lists.php.net to get a copy of this message | ||
On Fri, Feb 6, 2009 at 12:44, Terion Miller <webdev.terion@gmail.com> wrote:
>
> ---------------------
> $sql = "INSERT INTO admin (UserName, Password, Name, Email, Property,
> Department, AddWorkOrder, ";
> $sql .= "ViewAllWorkOrders, ViewNewOrders, ViewNewArt,
> ViewPendingWorkOrders, ViewPendingArtwork, ViewCompletedArt, ";
> $sql .= "ViewCompletedWorkOrders, SearchWorkOrder, EditWorkOrder,
> DelWorkOrder, ChangeStatus, AddEditAdmin";
> $sql .= ") VALUES( '$UserName', '$Password',
> '$Name', '$Email',
> '$Property', '$Department', '$AddWorkOrder', ";
> $sql .= "'$ViewAllWorkOrders', '$ViewNewOrders',
> '$ViewNewArt',
> '$ViewPendingWorkOrders', '$ViewPendingArtwork', ";
> $sql .= "'$ViewCompletedArt', '$ViewCompletedWorkOrders',
> '$SearchWorkOrder', '$EditWorkOrder', '$DelWorkOrder', ";
> $sql .= "'$ChangeStatus', '$AddEditAdmin',
> '$ViewMyOrders')";
> $result = mysql_query($sql);
1.) You have 19 columns named, but 20 values given.
2.) Make sure you use mysql_real_escape_string() or otherwise
sanitize the data.
3.) When you run into similar issues, use <?php mysql_query($sql)
or die(mysql_error()); ?>
--
</Daniel P. Brown>
daniel.brown@parasane.net || danbrown@php.net
http://www.parasane.net/ || http://www.pilotpig.net/
Unadvertised dedicated server deals, too low to print - email me to find out!