Problems writing to mySQL DB in PHP..

[Pheddy]

Hey everybody :D

I have a problem writing variables to my mySQL database using PHP. I am faerly new to php, and this problem seems to keep irritating me, so please help me hehe !! Thanks :D

When creating a var like:
[code=php]$strSIP = $_SERVER['REMOTE_ADDR'];[/code]

And trying to put it into the mysql_query like:
[code=php]$query = "INSERT INTO `sys_session` (`ID`, `syslog_ip`)" .
" VALUES ('', $strSIP)";

$result = mysql_query( $query );[/code]
I get the mysql_error:

You have an error in your SQL syntax near '.1.2)' at line 1

(I have trunk'd some of the code..)
What is wrong here? when i print or echo the $strSIP it gives the perfekt xxx.xxx.x.x IP.. The mySQL database is set up in syslog_ip as varchar(128)..

Thanks for any reply.

[hoopy]

Hi you need to surround the variable in quotes if using characters like so:

[code=php]$query = "INSERT INTO `sys_session` (`ID`, `syslog_ip`)" ." VALUES ('','$strSIP')" ;[/code]

[prabirchoudhury]

hey.. if you are using php >4.0 then you have to call IP address using getenv() function

$strSIP = getenv('REMOTE_ADDR');

may be your sql insert ip field injecting empty..


look on PHP: getenv - Manual


:)

[Markus]

hey.. if you are using php >4.0 then you have to call IP address using getenv() function

$strSIP = getenv('REMOTE_ADDR');

may be your sql insert ip field injecting empty..


look on PHP: getenv - Manual


:)

Using $_SERVER is perfectly fine, and, as his first post shows, the ip address is being populated.

[Atli]

hey.. if you are using php >4.0 then you have to call IP address using getenv() function

That's just... not true.

Using $_SERVER['REMOTE_ADDR'] works fine in all versions later than 4.1.
Prior to that $HTTP_SERVER_VA RS['REMOTE_ADDR'] was used

[Pheddy]

Hi you need to surround the variable in quotes if using characters like so:

[code=php]$query = "INSERT INTO `sys_session` (`ID`, `syslog_ip`)" ." VALUES ('','$strSIP')" ;[/code]

Using quotes around the variable, was the answer here :D Thank you!