PHP script not updating mysql table -


this script not working... can tell me i'm doing wrong?

$id = $_post['id']; $name = $_post['name']; $date = $_post['date']; $shortdesc = $_post['shortdesc']; $link = $_post['link']; $target = $_post['target']; $sort = $_post['sort']; $html = $_post['html'];      include('appvars.php');      $query = "update insight set name='".$name."' , set date='". $date . "' , set html='" . $html . "' , set shortdesc='" . $shortdesc . "' , set link='" . $link . "' , set target='" . $target . "' , set sort='" . $sort . "' id='" . $id . "'";      mysqli_query($dbc, $query);

you aren't escaping values vulnerable sql injection , construction of invalid statements. example, if of input strings contain apostrophe cause code fail.

have @ prepared statements make easier construct queries parameters.

in query need use commas instead of and set.

$query = "update insight set name='foo', date='2012-12-10' id=42";

the syntax update described in mysql documentation:


Comments

Post a Comment

Popular posts from this blog

jquery - Invalid Assignment Left-Hand Side -

i trying assign class tag via jquery, resulting in error through firebug says "invalid assignment left-hand side" on fourth line below. <cfoutput> $('.pngfix a').each(function(index) { var hreflink = $(this).attr("href"); if (hreflink.tolowercase() = '../audio.cfm') { $(this).addclass('audioimg'); } }); </cfoutput> looking around online, looks syntax problem, don't seem see it... any tips? thanks if (hreflink.tolowercase() = '../audio.cfm') that attempts assign value, rather check equality. change = operator == .
Read more

java - Play! framework 2.0: How to display multiple image? -

i need display gallery of photos. here template: @(photos: list[photo]) @title = { <bold>gallery</bold> } @main(title,"photo"){ <ul class="thumbnails"> @for(photo <- photos) { <li class="span3"> <a href="#" class="thumbnail"> <img src="@photo.path" alt=""> </a> </li> } </ul> } and here controller method: public static result getphotos() { return ok(views.html.photo.gallery.render(photo.get())); } and here photo bean : @entity public class photo extends model { @id public long id; @required public string label; public string path; public photo(string path, string label) { this.path = path; this.label = label; } private static finder<long, photo> find = new finder<long, photo>( long.class, photo.class); public static list<phot...
Read more

gmail - Is there any documentation for read-only access to the Google Contacts API? -

i want read-only access user's google contacts. there stackoverflow member wanted this, , received following answer : yes, there is, use https://www.googleapis.com/auth/contacts.readonly scope , "view contacts". this exchange reference read-only access google contacts can find using google. simply using access token obtained attempt read usual google contacts api (i.e. https://www.google.com/m8/feeds ) fails insufficient permissions. similarly, using google contacts api on new target fails 404 errors (for example https://www.googleapis.com/auth/contacts.readonly/default/full ). is there documentation anywhere on how use api, or permissible way access google contacts api full read-write access?
Read more