PHP insert mess on IE8

[kensh1n]

---

Hi mga master ,, newbie pko sa php.. ask unta ko unsa ang solution ani nya. nag google ko wla man.. bsin kamo ra mka tubag ani akong question. IF FF nga browser akong gamiton ang insert nga statement working good cya.. mo add cya sa gusto nkong e pa add.. but if IE8 akong gamiton mo add hnuon cya pro duha ka buok record den ang ika duha kay blank ra ang auto incremented ra ang naay value sa mga columns.. Working rman jud ang insert nga code ang problem lng kai y duha ang e add sa IE8 den ok rman sa FF. MySQL akong db

<?php
$con = mysql_connect("localhost","root","");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("dbname", $con);

$sql="INSERT INTO tblName(name, location, budget, information, howtoget, nottomissed) VALUES('$_POST[name]','$_POST[location]','$_POST[budget]', '$_POST[addinfo]', '$_POST[howtoget]', '$_POST[missed]')";
mysql_query($sql,$con);
mysql_close($con);
?>

wla pa na nko ma sanitize akong connection code.. katOn2 ra ni ako..

[fixyourself]

weird, the reason why google didn't come up with some answers because I think php/cgi scripts are processed on the server itself and not in browsers.

I really have no idea how your browser caused the issue.

Maybe you did trigger those line of codes twice in your client script;

[Dondon]

Sa form daw dapit bai e post ang code.

[ondoy]

post daw imo form bai, akip sad javascript kung ni gamit ka

[fixyourself]

Sa form daw dapit bai e post ang code.

exactly.........

[dodie]

In this kind of issue, don't blame the BROWSER.

Your code should be like this

$sql="INSERT INTO tblName(name, location, budget, information, howtoget, nottomissed) 

VALUES(\"".mysql_escape_string($_POST[name])."\",
          \"".mysql_escape_string($_POST[location])."\",
          \"".mysql_escape_string($_POST[budget])."\",
          \"".mysql_escape_string($_POST[addinfo])."\",
          \"".mysql_escape_string($_POST[howtoget])."\",
          \"".mysql_escape_string($_POST[missed])."\" ); ";

MY EXPLAINATION:
*Proper use of escape characters like " into \" \ into \\ .... etc
*Proper use of concatenations. This is safe for passing variables as a string.
- remember PHP do not support ARRAY variables pass directly as string... unlike normal variable does.
*mysql_escape_string built-in function prevents SQL injection.


since your variable is using double quotes. You should "escape" double quotes as well.
If your variable is using single quotes, You escape single quotes sometimes but you have to be careful.

[salbahis]

huh? hmm... its very rare that PHP had browser issues... it runs on the server not on the browser...

check your JS and HTML Form ....

[Cybernaut]

Posible kaduha nag postback na imong browser..

butangi ug validation ang imong posting nga kung empty ang value dili sya mo insert..

[dodie]

huh? hmm... its very rare that PHP had browser issues... it runs on the server not on the browser...

check your JS and HTML Form ....

checking the form also helps... to be straight forward and easy, just use this code:

print_r($_POST);
print_r($_GET);

// or...
print_r($_REQUEST);

The purpose of this is to see the receiving side which variable are available to accept.

[kensh1n]

salamat mga master.. ako ning e try inyong mga inputs dri.. later nlng ko mag butang sa form code.