the script wont work and i cant find anything wrong please help

[so many sites so little time]

all right so the script is pretty simple it goes it retrives what the
id of the post is and it lets you edit it well no it doesnt.

now if you go to www.kirewire.com/pp2/index/php you will see a number 1
that is the value of collumn home_id which is set to auto increment ect
ect

but this script which gets the id of home_id of a row and lets you edit
it does not work for somereason...


if (isset ($_POST['submit'])) { // Handle the form.

// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',
body='{$_POST['body']}' WHERE home_id={$_POST['id']}";
$r = mysql_query ($query); // Execute the query.

// Report on the result.
if (mysql_affected _rows() == 1) {
print '<p>The blog entry has been updated.</p>';
} else {
print "<p>Could update the entry because: <b>" . mysql_error() .
"</b>. The query was $query.</p>";
}

} else { // Display the entry in a form.

// Check for a valid entry ID in the URL.
if (is_numeric ($_GET['id']) ) {

// Define the query.
$query = "SELECT * FROM home_id WHERE home_id={$_GET['id']}";
if ($r = mysql_query ($query)) { // Run the query.

$row = mysql_fetch_arr ay ($r); // Retrieve the information.

// Make the form.
print '<form action="update_ site.php" method="post">
<p>Header: <input type="text" name="header" size="40" maxsize="100"
value="' . $row['header'] . '" /></p>
<p>Body: <textarea name="body" columns="40" rows="5">' . $row['body']
.. '</textarea></p>
<input type="hidden" name="id" value="' . $_GET['id'] . '" />
<input type="submit" name="submit" value="Update your Website!" />
</form>';

} else { // Couldn't get the information.
print "<p>Could retrieve the entry because: <b>" . mysql_error() .
"</b>. The query was $query.</p>";
}

} else { // No ID set.
print '<p><b>You must have made a mistake in using this
page.</b></p>';
}

} // End of main IF.

mysql_close(); // Close the database connection.

?>

to see what you get go to www.kirewire.com/pp2/update_site.php

could you please help, thanks, and have a happy thanksgiving

[petersprc]

Re: the script wont work and i cant find anything wrong please help

Try "select * from home" instead of "from home_id"...?

$query = "SELECT * FROM home_id WHERE home_id={$_GET['id']}";

so many sites so little time wrote:

all right so the script is pretty simple it goes it retrives what the
id of the post is and it lets you edit it well no it doesnt.
>
now if you go to www.kirewire.com/pp2/index/php you will see a number 1
that is the value of collumn home_id which is set to auto increment ect
ect
>
but this script which gets the id of home_id of a row and lets you edit
it does not work for somereason...
>
>
if (isset ($_POST['submit'])) { // Handle the form.
>
// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',
body='{$_POST['body']}' WHERE home_id={$_POST['id']}";
$r = mysql_query ($query); // Execute the query.
>
// Report on the result.
if (mysql_affected _rows() == 1) {
print '<p>The blog entry has been updated.</p>';
} else {
print "<p>Could update the entry because: <b>" . mysql_error() .
"</b>. The query was $query.</p>";
}
>
} else { // Display the entry in a form.
>
// Check for a valid entry ID in the URL.
if (is_numeric ($_GET['id']) ) {
>
// Define the query.
$query = "SELECT * FROM home_id WHERE home_id={$_GET['id']}";
if ($r = mysql_query ($query)) { // Run the query.
>
$row = mysql_fetch_arr ay ($r); // Retrieve the information.
>
// Make the form.
print '<form action="update_ site.php" method="post">
<p>Header: <input type="text" name="header" size="40" maxsize="100"
value="' . $row['header'] . '" /></p>
<p>Body: <textarea name="body" columns="40" rows="5">' . $row['body']
. '</textarea></p>
<input type="hidden" name="id" value="' . $_GET['id'] . '" />
<input type="submit" name="submit" value="Update your Website!" />
</form>';
>
} else { // Couldn't get the information.
print "<p>Could retrieve the entry because: <b>" . mysql_error() .
"</b>. The query was $query.</p>";
}
>
} else { // No ID set.
print '<p><b>You must have made a mistake in using this
page.</b></p>';
}
>
} // End of main IF.
>
mysql_close(); // Close the database connection.
>
?>
>
to see what you get go to www.kirewire.com/pp2/update_site.php
>
could you please help, thanks, and have a happy thanksgiving

[so many sites so little time]

Re: the script wont work and i cant find anything wrong please help

nope
not working
petersprc wrote:

Try "select * from home" instead of "from home_id"...?
>

$query = "SELECT * FROM home_id WHERE home_id={$_GET['id']}";

>
so many sites so little time wrote:

all right so the script is pretty simple it goes it retrives what the
id of the post is and it lets you edit it well no it doesnt.

now if you go to www.kirewire.com/pp2/index/php you will see a number 1
that is the value of collumn home_id which is set to auto increment ect
ect

but this script which gets the id of home_id of a row and lets you edit
it does not work for somereason...


if (isset ($_POST['submit'])) { // Handle the form.

// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',
body='{$_POST['body']}' WHERE home_id={$_POST['id']}";
$r = mysql_query ($query); // Execute the query.

// Report on the result.
if (mysql_affected _rows() == 1) {
print '<p>The blog entry has been updated.</p>';
} else {
print "<p>Could update the entry because: <b>" . mysql_error() .
"</b>. The query was $query.</p>";
}

} else { // Display the entry in a form.

// Check for a valid entry ID in the URL.
if (is_numeric ($_GET['id']) ) {

// Define the query.
$query = "SELECT * FROM home_id WHERE home_id={$_GET['id']}";
if ($r = mysql_query ($query)) { // Run the query.

$row = mysql_fetch_arr ay ($r); // Retrieve the information.

// Make the form.
print '<form action="update_ site.php" method="post">
<p>Header: <input type="text" name="header" size="40" maxsize="100"
value="' . $row['header'] . '" /></p>
<p>Body: <textarea name="body" columns="40" rows="5">' . $row['body']
. '</textarea></p>
<input type="hidden" name="id" value="' . $_GET['id'] . '" />
<input type="submit" name="submit" value="Update your Website!" />
</form>';

} else { // Couldn't get the information.
print "<p>Could retrieve the entry because: <b>" . mysql_error() .
"</b>. The query was $query.</p>";
}

} else { // No ID set.
print '<p><b>You must have made a mistake in using this
page.</b></p>';
}

} // End of main IF.

mysql_close(); // Close the database connection.

?>

to see what you get go to www.kirewire.com/pp2/update_site.php

could you please help, thanks, and have a happy thanksgiving

[Brent Palmer]

Re: the script wont work and i cant find anything wrong please help


"so many sites so little time" <kkddrpg@gmail. comwrote in message
news:1164336448 .477402.134570@ 45g2000cws.goog legroups.com...

nope
not working
petersprc wrote:

>Try "select * from home" instead of "from home_id"...?
>>

$query = "SELECT * FROM home_id WHERE home_id={$_GET['id']}";

>>
>so many sites so little time wrote:

all right so the script is pretty simple it goes it retrives what the
id of the post is and it lets you edit it well no it doesnt.
>
now if you go to www.kirewire.com/pp2/index/php you will see a number 1
that is the value of collumn home_id which is set to auto increment ect
ect
>
but this script which gets the id of home_id of a row and lets you edit
it does not work for somereason...
>
>
if (isset ($_POST['submit'])) { // Handle the form.
>
// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',
body='{$_POST['body']}' WHERE home_id={$_POST['id']}";
$r = mysql_query ($query); // Execute the query.
>
// Report on the result.
if (mysql_affected _rows() == 1) {
print '<p>The blog entry has been updated.</p>';
} else {
print "<p>Could update the entry because: <b>" . mysql_error() .
"</b>. The query was $query.</p>";
}
>
} else { // Display the entry in a form.
>
// Check for a valid entry ID in the URL.
if (is_numeric ($_GET['id']) ) {
>
// Define the query.
$query = "SELECT * FROM home_id WHERE home_id={$_GET['id']}";
if ($r = mysql_query ($query)) { // Run the query.
>
$row = mysql_fetch_arr ay ($r); // Retrieve the information.
>
// Make the form.
print '<form action="update_ site.php" method="post">
<p>Header: <input type="text" name="header" size="40" maxsize="100"
value="' . $row['header'] . '" /></p>
<p>Body: <textarea name="body" columns="40" rows="5">' . $row['body']
. '</textarea></p>
<input type="hidden" name="id" value="' . $_GET['id'] . '" />
<input type="submit" name="submit" value="Update your Website!" />
</form>';
>
} else { // Couldn't get the information.
print "<p>Could retrieve the entry because: <b>" . mysql_error() .
"</b>. The query was $query.</p>";
}
>
} else { // No ID set.
print '<p><b>You must have made a mistake in using this
page.</b></p>';
}
>
} // End of main IF.
>
mysql_close(); // Close the database connection.
>
?>
>
to see what you get go to www.kirewire.com/pp2/update_site.php
>
could you please help, thanks, and have a happy thanksgiving

>

To me petersprc was on the right track. This may not be your main problem
but you still need to fix this part.
"SELECT * FROM home_id WHERE home_id" -"SELECT * FROM home WHERE home_id"
You should be selecting from a table.

Regards,

Brent Palmer.

[so many sites so little time]

Re: the script wont work and i cant find anything wrong please help

Alright so im trying that and still no luck the string defines home_id
as home_id={$_GET['id']}' so can i because the collumn i want to select
from is home_id can i say
$query = "SELECT home_id FROM home WHERE home_id={$_GET['id']}; or does
it need to stay wildcard?
Brent Palmer wrote:

"so many sites so little time" <kkddrpg@gmail. comwrote in message
news:1164336448 .477402.134570@ 45g2000cws.goog legroups.com...

nope
not working
petersprc wrote:

Try "select * from home" instead of "from home_id"...?
>
$query = "SELECT * FROM home_id WHERE home_id={$_GET['id']}";
>
so many sites so little time wrote:
all right so the script is pretty simple it goes it retrives what the
id of the post is and it lets you edit it well no it doesnt.

now if you go to www.kirewire.com/pp2/index/php you will see a number 1
that is the value of collumn home_id which is set to auto increment ect
ect

but this script which gets the id of home_id of a row and lets you edit
it does not work for somereason...


if (isset ($_POST['submit'])) { // Handle the form.

// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',
body='{$_POST['body']}' WHERE home_id={$_POST['id']}";
$r = mysql_query ($query); // Execute the query.

// Report on the result.
if (mysql_affected _rows() == 1) {
print '<p>The blog entry has been updated.</p>';
} else {
print "<p>Could update the entry because: <b>" . mysql_error() .
"</b>. The query was $query.</p>";
}

} else { // Display the entry in a form.

// Check for a valid entry ID in the URL.
if (is_numeric ($_GET['id']) ) {

// Define the query.
$query = "SELECT * FROM home_id WHERE home_id={$_GET['id']}";
if ($r = mysql_query ($query)) { // Run the query.

$row = mysql_fetch_arr ay ($r); // Retrieve the information.

// Make the form.
print '<form action="update_ site.php" method="post">
<p>Header: <input type="text" name="header" size="40" maxsize="100"
value="' . $row['header'] . '" /></p>
<p>Body: <textarea name="body" columns="40" rows="5">' . $row['body']
. '</textarea></p>
<input type="hidden" name="id" value="' . $_GET['id'] . '" />
<input type="submit" name="submit" value="Update your Website!" />
</form>';

} else { // Couldn't get the information.
print "<p>Could retrieve the entry because: <b>" . mysql_error() .
"</b>. The query was $query.</p>";
}

} else { // No ID set.
print '<p><b>You must have made a mistake in using this
page.</b></p>';
}

} // End of main IF.

mysql_close(); // Close the database connection.

?>

to see what you get go to www.kirewire.com/pp2/update_site.php

could you please help, thanks, and have a happy thanksgiving

>
To me petersprc was on the right track. This may not be your main problem
but you still need to fix this part.
"SELECT * FROM home_id WHERE home_id" -"SELECT * FROM home WHERE home_id"
You should be selecting from a table.
>
Regards,
>
Brent Palmer.

[Pedro Graca]

Re: the script wont work and i cant find anything wrong please help

so many sites so little time wrote:

<snip>

if (isset ($_POST['submit'])) { // Handle the form.
>
// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',
body='{$_POST['body']}' WHERE home_id={$_POST['id']}";
$r = mysql_query ($query); // Execute the query.

<snip>

could you please help, thanks, and have a happy thanksgiving

Check the return value of mysql_* calls.

Where I snipped add

if (!$r) {
// There was an error
// for simplicity sake, I'll just print it and exit
exit('Error in query (' . $query . '): ' . mysql_error());
}

Add similar code after *all* relevant mysql_* calls.
When you run the script and there is an error, the script itself will
tell you why it failed. After that you just need to (understand the
reason for failure and) correct the error and try again.

--
I (almost) never check the dodgeit address.
If you *really* need to mail me, use the address in the Reply-To
header with a message in *plain* *text* *without* *attachments*.

[Erwin Moller]

Re: the script wont work and i cant find anything wrong please help

so many sites so little time wrote:

<snip>

$query = "UPDATE home SET header='{$_POST['header']}',

This approach id possibly vunarable to SQL-injection.
That is bad.
NEVER trust data coming from GET, POST or COOKIE.

Possibly you have magic quotes enabled in php.ini, but you should at least
check for that.

It is much better to set up your applicatie right from the start than fixing
it afterward (after some funny guy gave the command to delete the database
by inserting that command in your 'header' variable).

Anybody who knows how SQL is formulated can come up with an SQL-injection
command. It is easy.

If you don't know what I am talking about (eg you don't know what magic
quotes are and how they change your data and WHY) then you better take a
break from developing your app and learn about that part first.

Regards,
Erwin Moller

[so many sites so little time]

Re: the script wont work and i cant find anything wrong please help

alright so i deleted the part about you must have made a mistake in
using this page
and added
if (!$r) {
// There was an error
// for simplicity sake, I'll just print it and exit
exit('Error in query (' . $query . '): ' . mysql_error());
}
and as you can see at kirewire.com/pp2/update_site.php
all it says now is you must have made a mistake in your query

agian the queries are:

<snip>
// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',
body='{$_POST['body']}' WHERE home_id={$_POST['id']}";
$r = mysql_query ($query); // Execute the query.
</snip>
and
<snip>
// Define the query.
$query = "SELECT * FROM home WHERE home_id={$_GET['id']}";
if ($r = mysql_query ($query)) { // Run the query.

$row = mysql_fetch_arr ay ($r); // Retrieve the information.
</snip>
Erwin Moller wrote:

so many sites so little time wrote:
>
<snip>

$query = "UPDATE home SET header='{$_POST['header']}',

>
This approach id possibly vunarable to SQL-injection.
That is bad.
NEVER trust data coming from GET, POST or COOKIE.
>
Possibly you have magic quotes enabled in php.ini, but you should at least
check for that.
>
It is much better to set up your applicatie right from the start than fixing
it afterward (after some funny guy gave the command to delete the database
by inserting that command in your 'header' variable).
>
Anybody who knows how SQL is formulated can come up with an SQL-injection
command. It is easy.
>
If you don't know what I am talking about (eg you don't know what magic
quotes are and how they change your data and WHY) then you better take a
break from developing your app and learn about that part first.
>
Regards,
Erwin Moller

[Andrew DeFaria]

Re: the script wont work and i cant find anything wrong please help

so many sites so little time wrote:

alright so i deleted the part about you must have made a mistake in
using this page
and added
if (!$r) {
// There was an error
// for simplicity sake, I'll just print it and exit
exit('Error in query (' . $query . '): ' . mysql_error());
}
and as you can see at kirewire.com/pp2/update_site.php
all it says now is you must have made a mistake in your query
>
agian the queries are:
>
<snip>
// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',
body='{$_POST['body']}' WHERE home_id={$_POST['id']}";
$r = mysql_query ($query); // Execute the query.
</snip>
and
<snip>
// Define the query.
$query = "SELECT * FROM home WHERE home_id={$_GET['id']}";
if ($r = mysql_query ($query)) { // Run the query.
>
$row = mysql_fetch_arr ay ($r); // Retrieve the information.
</snip>
Erwin Moller wrote:
>

Forgive me but I didn't see in your original code where you connected to
the database at all.

You might try running mysql from the command line and copy and pasting
that exact query in. Then play with it until your figure out what's
wrong with the query...

--

Andrew DeFaria <http://defaria.com>
Ever stop to think, and forget to start again?

[Andrew DeFaria]

Re: the script wont work and i cant find anything wrong please help

so many sites so little time wrote:

alright so i deleted the part about you must have made a mistake in
using this page
and added
if (!$r) {
// There was an error
// for simplicity sake, I'll just print it and exit
exit('Error in query (' . $query . '): ' . mysql_error());
}
and as you can see at kirewire.com/pp2/update_site.php
all it says now is you must have made a mistake in your query
>
agian the queries are:
>
<snip>
// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',
body='{$_POST['body']}' WHERE home_id={$_POST['id']}";
$r = mysql_query ($query); // Execute the query.
</snip>
and
<snip>
// Define the query.
$query = "SELECT * FROM home WHERE home_id={$_GET['id']}";
if ($r = mysql_query ($query)) { // Run the query.
>
$row = mysql_fetch_arr ay ($r); // Retrieve the information.
</snip>
Erwin Moller wrote:
>

Forgive me but I didn't see in your original code where you connected to
the database at all.

You might try running mysql from the command line and copy and pasting
that exact query in. Then play with it until your figure out what's
wrong with the query...

--

Andrew DeFaria <http://defaria.com>
Ever stop to think, and forget to start again?

[plemon]

Re: the script wont work and i cant find anything wrong please help

no no its there its just not important and not connected to the issue
thats why i left it out less code you need to rummage through if that
wasnt working i would get could not connect to database error but here
it is anyway:

<?php // Update_site.php
// This script edits a blog entry using an UPDATE query.

// Address error handing.
ini_set ('display_error s', 1);
error_reporting (E_ALL & ~E_NOTICE);

// Connect and select.
if ($dbc = @mysql_connect ('localhost', 'user', 'pass')) {

if (!@mysql_select _db ('kirewire_tpp' )) {
die ('<p>Could select the database because: <b>' . mysql_error() .
'</b></p>');
}

} else {
die ('<p>Could not connect to MySQL because: <b>' . mysql_error() .
'</b></p>');
}

Andrew DeFaria wrote:

so many sites so little time wrote:

alright so i deleted the part about you must have made a mistake in
using this page
and added
if (!$r) {
// There was an error
// for simplicity sake, I'll just print it and exit
exit('Error in query (' . $query . '): ' . mysql_error());
}
and as you can see at kirewire.com/pp2/update_site.php
all it says now is you must have made a mistake in your query

agian the queries are:

<snip>
// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',
body='{$_POST['body']}' WHERE home_id={$_POST['id']}";
$r = mysql_query ($query); // Execute the query.
</snip>
and
<snip>
// Define the query.
$query = "SELECT * FROM home WHERE home_id={$_GET['id']}";
if ($r = mysql_query ($query)) { // Run the query.

$row = mysql_fetch_arr ay ($r); // Retrieve the information.
</snip>
Erwin Moller wrote:

Forgive me but I didn't see in your original code where you connected to
the database at all.
>
You might try running mysql from the command line and copy and pasting
that exact query in. Then play with it until your figure out what's
wrong with the query...
>
--
>
Andrew DeFaria <http://defaria.com>
Ever stop to think, and forget to start again?
>
--------------080309080406020 402070802
Content-Type: text/html; charset=ISO-8859-1
X-Google-AttachSize: 1695
>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=IS O-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#fffff f" text="#000000">
so many sites so little time wrote:
<blockquote
cite="mid116449 8386.771276.175 300@j72g2000cwa .googlegroups.c om"
type="cite">
<pre wrap="">alright so i deleted the part about you must have made a mistake in
using this page
and added
if (!$r) {
// There was an error
// for simplicity sake, I'll just print it and exit
exit('Error in query (' . $query . '): ' . mysql_error());
}
and as you can see at kirewire.com/pp2/update_site.php
all it says now is you must have made a mistake in your query
>
agian the queries are:
>
&lt;snip&gt;
// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',
body='{$_POST['body']}' WHERE home_id={$_POST['id']}";
$r = mysql_query ($query); // Execute the query.
&lt;/snip&gt;
and
&lt;snip&gt;
// Define the query.
$query = "SELECT * FROM home WHERE home_id={$_GET['id']}";
if ($r = mysql_query ($query)) { // Run the query.
>
$row = mysql_fetch_arr ay ($r); // Retrieve the information.
&lt;/snip&gt;
Erwin Moller wrote:
</pre>
</blockquote>
Forgive me but I didn't see in your original code where you connected
to the database at all.<br>
<br>
You might try running mysql from the command line and copy and pasting
that exact query in. Then play with it until your figure out what's
wrong with the query...<br>
<pre>-- </pre>
<a href="http://defaria.com">An drew DeFaria</a><br>
<small><font color="#999999" >Ever stop to think, and forget to start
again?</font></small>
</body>
</html>
>
--------------080309080406020 402070802--

[plemon]

Re: the script wont work and i cant find anything wrong please help

p.s. its me so many sites so little time just thought i would use my
real name well part of it
plemon wrote:

no no its there its just not important and not connected to the issue
thats why i left it out less code you need to rummage through if that
wasnt working i would get could not connect to database error but here
it is anyway:
>
<?php // Update_site.php
// This script edits a blog entry using an UPDATE query.
>
// Address error handing.
ini_set ('display_error s', 1);
error_reporting (E_ALL & ~E_NOTICE);
>
// Connect and select.
if ($dbc = @mysql_connect ('localhost', 'user', 'pass')) {
>
if (!@mysql_select _db ('kirewire_tpp' )) {
die ('<p>Could select the database because: <b>' . mysql_error() .
'</b></p>');
}
>
} else {
die ('<p>Could not connect to MySQL because: <b>' . mysql_error() .
'</b></p>');
}
>
Andrew DeFaria wrote:

so many sites so little time wrote:

alright so i deleted the part about you must have made a mistake in
using this page
and added
if (!$r) {
// There was an error
// for simplicity sake, I'll just print it and exit
exit('Error in query (' . $query . '): ' . mysql_error());
}
and as you can see at kirewire.com/pp2/update_site.php
all it says now is you must have made a mistake in your query
>
agian the queries are:
>
<snip>
// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',
body='{$_POST['body']}' WHERE home_id={$_POST['id']}";
$r = mysql_query ($query); // Execute the query.
</snip>
and
<snip>
// Define the query.
$query = "SELECT * FROM home WHERE home_id={$_GET['id']}";
if ($r = mysql_query ($query)) { // Run the query.
>
$row = mysql_fetch_arr ay ($r); // Retrieve the information.
</snip>
Erwin Moller wrote:
>

Forgive me but I didn't see in your original code where you connected to
the database at all.

You might try running mysql from the command line and copy and pasting
that exact query in. Then play with it until your figure out what's
wrong with the query...

--

Andrew DeFaria <http://defaria.com>
Ever stop to think, and forget to start again?

--------------080309080406020 402070802
Content-Type: text/html; charset=ISO-8859-1
X-Google-AttachSize: 1695

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=IS O-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#fffff f" text="#000000">
so many sites so little time wrote:
<blockquote
cite="mid116449 8386.771276.175 300@j72g2000cwa .googlegroups.c om"
type="cite">
<pre wrap="">alright so i deleted the part about you must have made a mistake in
using this page
and added
if (!$r) {
// There was an error
// for simplicity sake, I'll just print it and exit
exit('Error in query (' . $query . '): ' . mysql_error());
}
and as you can see at kirewire.com/pp2/update_site.php
all it says now is you must have made a mistake in your query

agian the queries are:

&lt;snip&gt;
// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',
body='{$_POST['body']}' WHERE home_id={$_POST['id']}";
$r = mysql_query ($query); // Execute the query.
&lt;/snip&gt;
and
&lt;snip&gt;
// Define the query.
$query = "SELECT * FROM home WHERE home_id={$_GET['id']}";
if ($r = mysql_query ($query)) { // Run the query.

$row = mysql_fetch_arr ay ($r); // Retrieve the information.
&lt;/snip&gt;
Erwin Moller wrote:
</pre>
</blockquote>
Forgive me but I didn't see in your original code where you connected
to the database at all.<br>
<br>
You might try running mysql from the command line and copy and pasting
that exact query in. Then play with it until your figure out what's
wrong with the query...<br>
<pre>-- </pre>
<a href="http://defaria.com">An drew DeFaria</a><br>
<small><font color="#999999" >Ever stop to think, and forget to start
again?</font></small>
</body>
</html>

--------------080309080406020 402070802--

[Erwin Moller]

Re: the script wont work and i cant find anything wrong please help

so many sites so little time wrote:

alright so i deleted the part about you must have made a mistake in
using this page
and added
if (!$r) {
// There was an error
// for simplicity sake, I'll just print it and exit
exit('Error in query (' . $query . '): ' . mysql_error());
}
and as you can see at kirewire.com/pp2/update_site.php
all it says now is you must have made a mistake in your query
>
agian the queries are:
>
<snip>
// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',

Did you fix the SQL-injection vunerability I was warning you about?
No.
Reread my post.
Do yourself a favor and fix it.

Regards,
Erwin Moller

[plemon]

Re: the script wont work and i cant find anything wrong please help

i dont understand what you mean about if i dont get the info from post
where am i going to get it?
Erwin Moller wrote:

so many sites so little time wrote:
>

alright so i deleted the part about you must have made a mistake in
using this page
and added
if (!$r) {
// There was an error
// for simplicity sake, I'll just print it and exit
exit('Error in query (' . $query . '): ' . mysql_error());
}
and as you can see at kirewire.com/pp2/update_site.php
all it says now is you must have made a mistake in your query

agian the queries are:

<snip>
// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',

>
Did you fix the SQL-injection vunerability I was warning you about?
No.
Reread my post.
Do yourself a favor and fix it.
>
Regards,
Erwin Moller

[plemon]

Re: the script wont work and i cant find anything wrong please help

and there server im on is locked down like sadam so there not getting
in to do that and my ftp yeah sure they can try to crack it heh
Erwin Moller wrote:

so many sites so little time wrote:
>

alright so i deleted the part about you must have made a mistake in
using this page
and added
if (!$r) {
// There was an error
// for simplicity sake, I'll just print it and exit
exit('Error in query (' . $query . '): ' . mysql_error());
}
and as you can see at kirewire.com/pp2/update_site.php
all it says now is you must have made a mistake in your query

agian the queries are:

<snip>
// Define the query.
$query = "UPDATE home SET header='{$_POST['header']}',

>
Did you fix the SQL-injection vunerability I was warning you about?
No.
Reread my post.
Do yourself a favor and fix it.
>
Regards,
Erwin Moller