Displaying a single image and data

[hoopy]

I think you need to surround the variable if not an int.

$result = mysqli_query($dbLink, 
  "SELECT FileID, FileName, FileMime, 
  FileSize, ToolNumber, Created 
  FROM FileStorage 
  WHERE ToolNumber = 
  '" . mysql_real_escape_string($textfield) . "'");

[mike6256]

well I tried:

'" . mysql_real_esca pe_string($text field) . "'");

as reccommended- but get:

There are no files in the database

PHP Warning: mysql_real_esca pe_string() [function.mysql-real-escape-string]: Access denied for user 'ODBC'@'localho st' (using password: NO) in C:\Inetpub\wwwr oot\tlsc\list_f iles.php on line 12 PHP Warning: mysql_real_esca pe_string() [function.mysql-real-escape-string]: A link to the server could not be established in C:\Inetpub\wwwr oot\tlsc\list_f iles.php on line 12

[hoopy]

OK just try the following:

$result = mysqli_query($dbLink, 
  "SELECT FileID, FileName, FileMime, FileSize, 
  ToolNumber, Created 
  FROM FileStorage 
  WHERE ToolNumber = '$textfield'
");

The mysql_real_esca pe_string function is to make the data safe for MySQL insertion, maybe that is not used with mysqli, I have never really used it.

[Markus]

You're using MySQLi, so mysql_* functions are not going to work. Change it to mysqli_...

[mike6256]

Not quite sure I undestand-- can you explain a little and/or give a example?

[hoopy]

He means use mysqli_real_esc ape_string() instead of mysql_real_esca pe_string() like so:

$result = mysqli_query($dbLink, 
  "SELECT FileID, FileName, FileMime, 
  FileSize, ToolNumber, Created 
  FROM FileStorage 
  WHERE ToolNumber = 
  '" . mysqli_real_escape_string($textfield) . "'");

[mike6256]

Back again--got this error:

There are no files in the database

PHP Warning: mysqli_real_esc ape_string() expects exactly 2 parameters, 1 given in C:\Inetpub\wwwr oot\tlsc\list_f iles.php on line 17


do I need to do something like this

"SELECT FileID, FileName, FileMime,  
  FileSize, ToolNumber, Created  
  FROM FileStorage  
  WHERE id= '$id'
AND ToolNumber =  
  '" . mysqli_real_escape_string($textfield) . "'");

[hoopy]

Hi,

Change:

mysqli_real_escape_string($textfield)

To:

mysqli_real_escape_string($dbLink,$textfield)

[mike6256]

Guess what--more errors

PHP Parse error: parse error in C:\Inetpub\wwwr oot\tlsc\list_f iles.php on line 21

here are lines 21 thru 70

if($result)  
{ 
  
    # Make sure there are some files in there 
    if(mysqli_num_rows($result) == 0) { 
        echo "<p>There are no files in the database</p>"; 
    } 
    else 
    { 
        # Print the top of a table 
        echo "<table width='100%'><tr>"; 
        echo "<td><b>Name</b></td>"; 
        echo "<td><b>Mime</b></td>"; 
        echo "<td><b>Size (bytes)</b></td>"; 
        echo "<td><b>Created</b></td>"; 
		echo "<td><b>Tool Number</b></td>";
        echo "<td><b>&nbsp;</b></td>"; 	
        echo "</tr>"; 
  
        # Print each file 
        while($row = mysqli_fetch_assoc($result)) 
        { 
            # Print file info 
            echo "<tr><td>". $row['FileName']. "</td>"; 
            echo "<td>". $row['FileMime']. "</td>"; 
            echo "<td>". $row['FileSize']. "</td>"; 
            echo "<td>". $row['Created']. "</td>"; 
			echo "<td>". $row['ToolNumber']. "</td>";
  
            # Print download link 
            echo "<td><a href='get_file.php?id=". $row['FileID'] ."'>Download</a></td>"; 
            echo "</tr>"; 
        } 
  
        # Close table 
        echo "</table>"; 
    } 
  
    # Free the result 
    mysqli_free_result($result); 
} 
else  
{ 
    echo "Error! SQL query failed:"; 
    echo "<pre>". $dbLink->error ."</pre>"; 
} 
  
# Close the mysql connection 
mysqli_close($dbLink); 
?>

[hoopy]

I suspect the error is just prior to what you pasted.

Please post all the code and use code tags as well please. Its very difficult to read without tags.

[Markus]

mike,

Please read your Personal Messages. You have already received a warning.

[mike6256]

how do I do code tags??

[mike6256]

sorry about the tags

here is the code--let me know if I did it correct

 <?php 
# Connect to the database 
$dbLink = mysqli_connect("71.39.54.10", "root", "trinidad", "tools"); 
if(mysqli_connect_errno()) { 
    die("MySQL connection failed: ". mysqli_connect_error()); 
} 
  
# Query for a list of all existing files 
// just one possibility... 
$textfield = $_POST['textfield'];  
  
$result = mysqli_query($dbLink,  
  "SELECT FileID, FileName, FileMime,  
  FileSize, ToolNumber, Created  
  FROM FileStorage  
  WHERE ToolNumber =  
  '" . mysqli_real_escape_string($dbLink,$textfield) 
 
  
# Check if it was successfull 
if($result)  
{ 
  
    # Make sure there are some files in there 
    if(mysqli_num_rows($result) == 0) { 
        echo "<p>There are no files in the database</p>"; 
    } 
    else 
    { 
        # Print the top of a table 
        echo "<table width='100%'><tr>"; 
        echo "<td><b>Name</b></td>"; 
        echo "<td><b>Mime</b></td>"; 
        echo "<td><b>Size (bytes)</b></td>"; 
        echo "<td><b>Created</b></td>"; 
		echo "<td><b>Tool Number</b></td>";
        echo "<td><b>&nbsp;</b></td>"; 	
        echo "</tr>"; 
  
        # Print each file 
        while($row = mysqli_fetch_assoc($result)) 
        { 
            # Print file info 
            echo "<tr><td>". $row['FileName']. "</td>"; 
            echo "<td>". $row['FileMime']. "</td>"; 
            echo "<td>". $row['FileSize']. "</td>"; 
            echo "<td>". $row['Created']. "</td>"; 
			echo "<td>". $row['ToolNumber']. "</td>";
  
            # Print download link 
            echo "<td><a href='get_file.php?id=". $row['FileID'] ."'>Download</a></td>"; 
            echo "</tr>"; 
        } 
  
        # Close table 
        echo "</table>"; 
    } 
  
    # Free the result 
    mysqli_free_result($result); 
} 
else  
{ 
    echo "Error! SQL query failed:"; 
    echo "<pre>". $dbLink->error ."</pre>"; 
} 
  
# Close the mysql connection 
mysqli_close($dbLink); 
?>

[Markus]

You've missed some quotes:

$result = mysqli_query($dbLink,  
  "SELECT FileID, FileName, FileMime,  
  FileSize, ToolNumber, Created  
  FROM FileStorage  
  WHERE ToolNumber =  
  '" . mysqli_real_escape_string($dbLink,$textfield)

Should be

$result = mysqli_query($dbLink,  
  "SELECT FileID, FileName, FileMime,  
  FileSize, ToolNumber, Created  
  FROM FileStorage  
  WHERE ToolNumber =  
  '" . mysqli_real_escape_string($dbLink,$textfield) . "'";

[mike6256]

added the quotes--now get:
PHP Parse error: parse error in C:\Inetpub\wwwr oot\tlsc\list_f iles.php on line 17 here are lines 12 - 17

$result = mysqli_query($dbLink,   
  "SELECT FileID, FileName, FileMime,   
  FileSize, ToolNumber, Created   
  FROM FileStorage   
  WHERE ToolNumber =   
  '" . mysqli_real_escape_string($dbLink,$textfield) . "'";