Difficulty querying two tables in mysql with php -


i have database in mysql , contains 2 tables:

table: political_party +----------+--------------------+-------+ | party_id | party_abbreviation | party | +----------+--------------------+-------+  table: polling_party_result +----+------+-----------------+ | id | p_id | number_of_votes | +----+------+-----------------+

i writing php program outputs form, updates political_party_result table id runs 1 x.. problem i'm facing on form, id relates party_abbreviation column in above political_party table.

that 1(in political_party_result table) should bring out ap(from political_party table) 2 = adc
3 = pdp etc..

here html code:

<!doctype html public "-//w3c//dtd xhtml 1.0 transitional//en" "http://www.w3.org/tr/xhtml1/dtd/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8" /> <title>html inec</title> </head>  <body> <form action="inechp.php" method="post" name="form1"> id: <input name="id" type="text" /> <br /> <br /> polling unit: <input name="pid" type="text" /> <br /> <br /> number of votes: <input name="votes" type="text" /> <br /> <br /> <input type="submit" /> <br /> </form>  <form action="inechp.php" method="post" name="form2"> polling unit: <input name="unit" type="text" /> <br /> number of votes: <input name="nov" type="text" /> <br /> <input type="submit" /> </form> </body> </html>

here php code:

<?php $con = mysqli_connect("localhost", "root", "", "inec_results");  mysqli_query($con, "update inec_results.polling_party_result set p_id ='$_post[pid]' , number_of_votes = '$_post[votes]' id = '$_post[id]'"); ?>

forgive me if explanations weren't satisfactory i'm bit new php.

mysqli_query($con, "update inec_results.polling_party_result set p_id ='$_post[pid]' , number_of_votes = '$_post[votes]' id = '$_post[id]'");

this bad number of reasons.

firstly not validating form data have received valid. e.g enter email address id field , pass directly database. leads onto second big issue.

you should never place post data directly sql, andrew mentions insecure , malicious user quite drop entire database sql injection.

having said not sure passing post variables (its been little while since touched php) because entire statement in double quotes. means '$_post[var]' parts being read in part of string literal. (meaning passing value $_post[var] instead of value form. need brace or fullstop vars '{$_post[var]}' or '.$_post[var].'(but again bad!).

what should mentioned used prepared statement after have validated data. can see example here how can prevent sql injection in php?


Comments

Post a Comment

Popular posts from this blog

jquery - How can I dynamically add a browser tab? -

since using iframes house external pages are, accounts "not preferred method" , disallowed sites (flickr, one), want dynamically generate browser tabs. e.g., when user submits form, want dynamically generate tab on browser in response submitted. e.g., might want add new tab url like: http://www.bigsurgarrapata.com/contact how in jquery? you want form target attribute action attribute. http://www.w3schools.com/tags/att_form_target.asp browsers have ultimate control on result of target attribute open new tab value of _blank. <form action="contact_submit.php" target="_blank" method="post">
Read more

keyboard - C++ GetAsyncKeyState alternative -

i using windows.h library's getasynckeystate function define key pushed on keyboard . here program returns int value of pushed key example. #include <iostream> #include <windows.h> using namespace std; int main (){ char i; for(i=8;i<190;i++){ if(getasynckeystate(i)== -32767){ cout<<int (i)<<endl; } } return 0; } but trying make opengl simple game , function appeared slow . there function not need cycle 180 times , if statement . thanks you're trying make opengl game, you're going use glfw. if that's case can away using glfwgetkey() such: if (glfwgetkey(glfw_key_up) == glfw_press) {...} if (glfwgetkey(glfw_key_down) == glfw_press) {...} that method nicely explained in tutorial 6 opengl-tutorial.org . should start first tutorial of beginners tutorials , later intermediate tutorials . if you're going make win32 window can listen wm_keydown or wm_keyup messages , virtua...
Read more

android - java.net.UnknownHostException(Unable to resolve host “URL”: No address associated with hostname) -

i developing app testing asp.net webservice in android.for simple webservice adding 2 numbers used.where numbers passed parameters.the result in dialogue.the webserver works in local. when application runs following result exception.i provided internet permission in manifest. java.net.unknownhostexception(unable resolve host “ http://url.com/ ”: no address associated hostname) my code given below main activity public static string rslt=""; /** called when activity first created. */ @override public void oncreate(bundle savedinstancestate) { super.oncreate(savedinstancestate); setcontentview(r.layout.activity_main); button b1=(button)findviewbyid(r.id.button1); final alertdialog ad=new alertdialog.builder(this).create(); b1.setonclicklistener(new onclicklistener() { @override public void onclick(view arg0) { // todo auto-generated method stub try { ...
Read more