MySQL Query not returning specific search parameters via php script -



MySQL Query not returning specific search parameters via php script -

i have php driven page allows me come in search parameters. 1 of these numbers id consists of several digits. when search 1 these specific digits returns results.

i have done exact same statement in phpmyadmin , sql terminal , returns item searched for. suppose problem lies php using submit search query based on html form.

the drop downwards status options works fine - of fields requires input not.

also sure fields submitting database because can view them , finish sql statements them in phpadmin

edit echo result when numericidentider entered , default status of selected: select * table closed != ' '

<?php if($_request['search']) { $sql = "select"; if(strlen($_request['numericidentifier']) > 0) { $sql .= " * table numericidentifier = ".$_request['numericidentifier']; } if(strlen($_request['begindate']) > 0) { $sql .= " * table tdate >= {$_request['begindate']}"; } if(strlen($_request['enddate']) > 0) { $sql .= " * table tdate <= {$_request['enddate']}"; } if($_request['status'] == 'shipped') { $sql .= "* table closed = 'true' "; } if($_request['areacode'] > 0) { $sql .= " * table areacode = {$_request['areacode']}"; } if($_request['status'] == 'recieved') { $sql .= " * table closed != 'true'"; } if($_request['status'] == 'all') { $sql = "select * table closed != '\0'"; } } else { $sql = "select * tickets"; } $res = mysql_query($sql, $conn1); while($a = mysql_fetch_array($res)) { echo "<tr><td>&nbsp;<a href='ticket.php?id=".$a['id']."'>".trim($a['id'])."</a>&nbsp;</td> \n <td> ".$a['name']."</td> \n <td>".date("m/d/y", strtotime($a['ticketdate']))."</td> \n <td>".$a['issue']."</td> \n <td>".showstatus($a['closed'])." </td></tr>"; } ?> </table> </body> </html>

yeesh, sql never work. let's user enters both begindate , and enddate, query be

select * table tdate >= {$_request['begindate']} * table tdate <= {$_request['enddate']}

even if dates entered in mysql form (yyyy-mm-dd), still come out

select * table tdate >= 01/01/2011 * table tdate <= 31/12/2011

notice there's no quotes around dates. mysql see "dates" beingness numbers, beingness divided, you're saying tdate >= 0.0004972... , tdate <= 0.001284...

on top of that, saying * table twice illegal syntax.

your code not checking error states. @ absolute bare minimum should have:

$result = mysql_query($sql) or die(mysql_error());

which tell what's wrong query you've constructed.

and, worst of all, others have said, you're open , vulnerable sql injection attacks, i'm not going go that... query hopeless broken injection attack to the lowest degree of worries.

php mysql

Comments

Post a Comment

Popular posts from this blog

iphone - Dismissing a UIAlertView -

iphone - Dismissing a UIAlertView - i set in app purchase app, , when user taps button, purchase started. basically, tap button, , depending on speed on net connection, waiting 10 seconds until new alert view comes asking if purchase product. user tap button multiple times since nil came up, , multiple purchase alert views come up. additionally, maybe seen user app bug. in end, problem. i want alert view come spinning wheel says "loading..." when users taps purchase button. problem is, how dismiss when new alert view comes asking user if want purchase product? if ([uialertview alloc] says: @"whatever apple's alert view says") { //dismiss "loading..." alert view here } i uncertainty work, input appreciated. thanks! you need have access alertview. can this. create alertview instance var in app delegate , when want show loading initialize instance var assign property , when want dismiss phone call [alertviewinstance d...
Read more

c# - Can ProtoBuf-Net deserialize to a flat class? -

c# - Can ProtoBuf-Net deserialize to a flat class? - protobuf-net uses nested protobuf constructs back upwards inheritance. however, can made force properties flat target class has same properties inherited "serialized" version? see test illustration below. needless result of flat namespace null both properties. possible solution: re-create info flat.b first on property property basis. note: not prefered option. using system; namespace hierarchy { using protobuf; [protocontract] public class { [protomember(1)] public string prop1 { get; set; } } [protocontract] public class b : { public b() { } [protomember(1)] public string prop2 { get; set; } public override string tostring() { homecoming "prop1=" + prop1 + ", prop2=" + prop2; } } } namespace flat { using protobuf; [protocontract] p...
Read more

javascript - Change element in each JQuery tab to dynamically generated colors -

javascript - Change element in each JQuery tab to dynamically generated colors - i'm using jquery ui tabs widget , have button add together additional tabs. i'm tying each tab markers on map coordinating randomly generated color using function gen_color() { homecoming '#'+(math.random()*0xffffff<<0).tostring(16); } so each tab has color corresponds number of markers of same color on map. i'm trying add together 15x15 block of color within tab's tab left of it's label. right i'm using tabtemplate alternative , trying alter when new tab added: $tabs = $("#tabs").tabs({ tabtemplate: "<li><span class='ui-icon-color' style='background-color:#000000;'></span><a href='#{href}'>#{label}</a> <span class='ui-icon ui-icon-close'>remove tab</span></li>", selected: 0, add: funct...
Read more