php - Session variable is not working in MySQL statement -

-


php - Session variable is not working in MySQL statement -

i trying utilize session variable($_session['asc_id'], holds value "as0027001") in sql statement, not working. when hardcode value, is providing results.

can please right me.

mysql query not working

$asc_id = $_session['asc_id']; $rs = mysql_query('select asc_lastname, asc_firstname, asc_middlename, lname_fname_dob issio_asc_workers asc_user_type = 31 , asc_id = "$asc_id" , lname_fname_dob "' . mysql_real_escape_string($_request['term']) . '%" order lname_fname_dob asc limit 0,10', $dblink);

mysql query working

$rs = mysql_query('select asc_lastname, asc_firstname, asc_middlename, lname_fname_dob issio_asc_workers asc_user_type = 31 , asc_id = "as0027001" , lname_fname_dob "' . mysql_real_escape_string($_request['term']) . '%" order lname_fname_dob asc limit 0,10', $dblink);

when print strings, clear. when question reformatted leave sql readable, problem clear. (the first rule debugging sql statements "print string". sec rule, makes easier comply first, set sql statements string pass sql function.)

you utilize . notation embed request term in string; don't utilize embed $asc_id string. should utilize mysql_real_escape_string() on session id value prevent sql injection.

php mysql

Comments

Post a Comment

Popular posts from this blog

How do I check if an insert was successful with MySQLdb in Python? -

-
How do I check if an insert was successful with MySQLdb in Python? - i have code: cursor = conn.cursor() cursor.execute(("insert new_files (videos_id, filename, " "is_processing) values (%s,%s,1)"), (id, filename)) logging.warn("%d", cursor.rowcount) if (cursor.rowcount == 1): logging.info("inserted values %d, %s", id, filename) else: logging.warn("failed insert values %d, %s", id, filename) cursor.close() fun is, cursor.rowcount always one, though updated database create videos_id unique key. is, insert fails because in tests same videos_id going appear (and when check database, nil inserted). whatever reason, rowcount 1 - logging.warn have spits out rowcount of 1. so, question: can utilize rowcount work out if insert went fine? if so, (presumably) doing wrong? otherwise, how check if insert went fine? your code not commit after modifications (your modifications rolled back). should...
Read more

delphi - blogger via idHTTP : error 400 bad request -

-
delphi - blogger via idHTTP : error 400 bad request - i'm trying post blogger using idhttp component, however, i'm getting "http/1.0 400 bad request" error. procedure tform1.button1click(sender: tobject); var request,response,req : tstringlist; auth,blogid : string; begin blogid := '00000000000000000000000'; request := tstringlist.create; response := tstringlist.create; req := tstringlist.create; idhttp1.request.connection := 'keep-alive'; idhttp1.request.contenttype := 'application/x-www-form-urlencoded'; idssliohandlersocket1.ssloptions.method := sslvsslv23; request.clear(); request.values['accounttype'] := 'google'; request.values['email'] := 'xxx@gmail.com'; request.values['passwd'] := 'yyy'; request.values['service'] := 'blogger'; response.text :=idhttp1.post('https://www.google.com/accounts/clientlogin',request); auth := resp...
Read more

postgresql - ERROR: operator is not unique: unknown + unknown -

-
postgresql - ERROR: operator is not unique: unknown + unknown - i have postgis database , have compute new values rows in new column. these values should average of values of several columns. query: insert bdps (da_m) values (avg('da_1'+'da_2'+'da_3'+'da_4'+'da_5'+'da_6'+'da_7')); in query bdps database, da_m new column , da_1 da_7 existing columns have double precision type. da_m created using alter table bdps add together column da_m double precision; i next error: error: operator not unique: unknown + unknown line 2: values (avg('da_1'+'da_2'+'da_3'+'da_4'+'da_5'+'da_6'+'da_7... ^ hint: not take best candidate operator. might need add together explicit type casts. ********** error ********** error: operator not unique: unknown + unknown sql state: 42725 hint: not take best candidate operator. might need add togethe...
Read more