|
So I am currently trying to write an PHP function which updates fields within a table (mysqli database):
The code that I currently have in my PHP code function is:
public function insertValue($id, $attribute, $value){
try {
$stmt = $this->connect()->query("UPDATE attributes SET ".$attribute." = ".$value. " WHERE id = ".$id);
} catch (Exception $e) {
return $e->getMessage();
}
Where the parameters are being passed from another .php file:
if (isset($_POST['box2__submit'])) {
$id = $_POST['box2__userid-input'];
$attribute = $_POST['box2__attribute-input'];
$value = $_POST['box2__value-input'];
$DB = new db_class();
echo $DB->insertValue($id, $attribute, $value);
Now the problem is that everything works fine untill I pass a value that is letters for example passing - "Hello" with $value throws an error:
SQLSTATE[42S22]: Column not found: 1054 Unknown column 'Hello' in 'field list'
However if I pass values that are numerical, for example - 1337, it works just fine. I have no idea what's wrong and how can I fix this.
Help!
|
|
|
|
|
The error is because you are building an SQL statement and not quoting the values. You don't have to quote numeric values, but strings do need to be quoted.
I also have to point out that you should never build an SQL statement with user input unless you sanitize your inputs somehow. Little Bobby tables[^]
The mysqli driver supports prepared statements with placeholders, so using that is an easy way to fix it.
|
|
|
|
|
I managed to get it working with the following query:
"UPDATE attributes SET $attribute = ".$value. " WHERE id = ".$id;
As for security, Yes I have my own field validator which checks and removes all bad symobls ('' etc)
Thanks.
|
|
|
|
|
I recently created a web-accessible intranet site for a customer (it's an internal business application, but hosted on an external shared host so has a "public" domain name). It's SSL-secured and password protected. Today a user reported a page within the site being flagged by Norton Safeweb (a browser plug-in) with the heading "Scam Insight: Personal Information Risk". It's a full-screen warning that says the site is "not well established with the Norton Community. Use caution when entering" and has a large button "Exit site" and a smaller link "Continue to site".
It seems Norton "rate" sites and the extension dynamically blocks access to sites they - Norton - have not whitelisted. There's a (very buggy) process to register as the owner of a site (which involves uploading an encoded HTML file - god knows what it contains - and then getting Norton to verify), however registration as owner does not in itself whitelist the site. You need to explicitly request assessment (which I've done) but it can take a while, and it seems that if they then deem your site "unsafe" that they will continue to block it. There's a dispute resolution process but it seems people spend a lot of time fighting inappropriate ratings from Norton.
This is unilateral censorship of the web, without explanation of what any issue is. (Other virus checkers may warn about a mismatched or expired SSL cert, for example, but the warnings are generally explicit about the problem, and there is a clear issue). Norton don't make any attempt to notify a site owner if they block access to it unless the site owner has registered. It doesn't apply in this case, but suppose I'd spent marketing dollars driving potential clients to a commerce site - I'd be losing both visitors and income.
Am I over-reacting about this? Does it seem fair? What are other people's experience with Norton SafeWeb, and does anyone know what they're even looking for??
modified 26-Dec-19 13:25pm.
|
|
|
|
|
Not being "well established with the Norton Community" may be perceived as a promise of quality, imho 
"Five fruits and vegetables a day? What a joke!
Personally, after the third watermelon, I'm full."
|
|
|
|
|
Hours of googling and endless articles is what i've gone trough, but still haven't found a direct answer.
What makes CSS Reusable? Or what is considered Reusable CSS?
As I understand it has something to do with class names, i.e - images images-footer, heading-heading-first etc.
Can anyone explain please?
|
|
|
|
|
Basically answering my own question, so that this maybe helps others that came across this.
So after doing more research, I found out that by reusable CSS:
"There are some significant shortcomings that makes CSS difficult for reusability, modularity, and maintainability. Features like nested selectors can be tempting to use but lead to brittle, difficult to maintain code that doesn’t stand up well to changes in the HTML. There also isn’t a single standard to use when making organization decisions for your CSS. However there are some methodologies that are commonly used to organize CSS at scale.
1. BEM
2. SMACSS
3. OOCS"
This article explains it: - https://medium.com/@afrench53198/reusable-maintainable-and-modular-css-b0ffedf1c208[^]
|
|
|
|
|
I have 4 div boxes and each div box has elements inside them, which are h1 headings, p paragraphs and buttons.
All 4 div boxes are centered in the middle of the page by using:
position: relative;
After that I have added:
Top:
Left: positions to position Divs.
My question is do all other elements inside the page, that are inside those Div boxes also need Position: Relative | Left: | Top:
Or should I just position them by using margin-top/left, padding-top/left?
Of course both methods will work, but what is the best practice?
Also, Do all elements need the:
Display: block; | inline | Inline block
Attributes ? Or is it fine to position them without these elements?
|
|
|
|
|
|
What's the consensus on the security of using a webservice (asmx) for general database entry? Secure, not secure, better than using .NET SQLDatasource? Interested in feedback and if there's anything better that I can use.
|
|
|
|
|
I really have not heard of anything bad about SqlDataSource, but I am not a fan of it and prefer to use code-behinds or web services of some type or another
Director of Transmogrification Services
Shinobi of Query Language
Master of Yoda Conditional
|
|
|
|
|
|
I want to improve my website speed
|
|
|
|
|
Not a question.
ALL of us want to improve our web site speed.
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
|
|
|
|
|
Get rid of all the frameworks, images, and ads.
Director of Transmogrification Services
Shinobi of Query Language
Master of Yoda Conditional
|
|
|
|
|
1) Enable compression.
2) Minify CSS, JavaScript, and HTML.
3) Reduce redirects.
4) Remove render-blocking JavaScript.
5) Leverage browser caching.
6) Improve server response time.
7) Use a content distribution network.
8) Optimize images.
|
|
|
|
|
I want to improve my website speed it takes too much time to open
|
|
|
|
|
Improve server response time
To improve your server response time, look for performance bottlenecks like slow database questions, slow routing, or a lack of adequate memory and fix them.
|
|
|
|
|
I have some experience developing ASP.Net Web API's for use on a company network. But to expose it publicly, it needs to be secure. I'm guessing what I want is to control who has access to the api.
I found this article:
https://code.tutsplus.com/tutorials/securing-aspnet-web-api--cms-26012
Since I have no experience doing this, can someone smarter than me validate this article? is this the right way?
If it's not broken, fix it until it is.
Everything makes sense in someone's mind.
Ya can't fix stupid.
modified 4-Dec-19 15:18pm.
|
|
|
|
|
The article is not valid for dotnet Core, it does not explain the new service configuration DI.
Never underestimate the power of human stupidity -
RAH
I'm old. I know stuff - JSOP
|
|
|
|
|
I'm using .Net Framework
If it's not broken, fix it until it is.
Everything makes sense in someone's mind.
Ya can't fix stupid.
|
|
|
|
|
I am trying to design a simple webpage for our customers to upload a sql database backup file. I have a basic form but not sure where to go from here. New to this. Here is my code so far.
<!DOCTYPE html>
<html>
<body>
<form action="" method="post" enctype="multipart/form-data">
<img src="fieldedge_logo.jpg" width="297" height="182" alt=""/> <br>
<h1 style="color:black;" >Customer File Upload Site</h1><br><br>
<h3 style="color:black" >Please enter your Customer Name:</h3><input type="text" name="CustName"/><br><br>
<input type="file"
name="file"
accpt=".bak"/>
<br>
<input type="submit" value="Upload"/>
</form>
</body>
</html>"
|
|
|
|
|
Member 14675590 wrote: <form action="place your page name here, or api name" method="post" enctype="multipart/form-data">
You need an action to send it to.
An action would be server side code in which you post directly to a page, or API.
This page or API would have to accept a HTTP POST event.
Since you only posted HTML and didn't indicate your technology like PHP, ASP, I'm not able to assist any further.
But you can choose to post it back to the same page.
If it ain't broke don't fix it
Discover my world at jkirkerx.com
|
|
|
|
|
I have Created new Window Service.This Service Gets the Logs From BioMetric device.But the Service gets the last records and inserted in every time.So What Can I do?
|
|
|
|
|
You can do it differently.
"Five fruits and vegetables a day? What a joke!
Personally, after the third watermelon, I'm full."
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
