check my code some error in my code,php mysql

Question

3.00/5 (1 vote)

See more:

PHP

<?php
include('connect.php');
?>
<?php
session_start();
?>
         
		<?php
		if (isset($_SESSION['dob']) && isset($_SESSION['month']) && isset($_POST['present'])) {
		$dob=$_SESSION['dob'];
		$month=$_SESSION['month'];
		}
			$s=$_POST['present'];
			$p="1";
			foreach( $s as $value=>$var)
			     {
			 $sql= "UPDATE atten SET total=total+1 where roll ='$var'";
			 $mont="UPDATE $month SET $dob='$p' where roll='$var'";
		echo $sql . " " . $mont;  
				 mysql_query($sql) or die(mysql_error());
				 mysql_query($mont) or die(mysql_error());
				 
			}
			}
			
			?>

my complete code is above and my error in this code only.

PHP

$mont="UPDATE $month SET $dob='$p' where roll='$var'";

how to update database table.?

Posted 20-Dec-13 5:08am

rao0088

Add a Solution

Comments

Maarten Kools 20-Dec-13 11:14am

And the error is...?

I would advise you to use prepared statements instead of what you are doing now. This makes your code vulnerable to SQL injection[^].

rao0088 20-Dec-13 11:25am

thanks for advise ...

ZurdoDev 20-Dec-13 11:34am

What's the error?

rao0088 20-Dec-13 22:55pm

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'SET --='1' where roll='901'' at line 1

Peter Leow 31-Dec-13 7:16am

Have you solved your problem already? If not, could you show the code for the calling page. Not enough information. Please use the "Improve question" button.

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Er. Tushar Srivastava · Answer 1 · 2013-12-22T00:14:00

Hi friend, obviously there is an error,

See it and if it resolved your problem do mark it as solved :)

Here's the issue,
Your MYSQL query is

PHP

  $mont="UPDATE $month SET $dob='$p' where roll='$var'";
?>

And the error is $month and $dob ... My friend, you have to use the field name in the table in your database. Also, the table name can be month and not $month. It is possible that the table field name is dob so...

If field name is dob and table name is month, the correction is

PHP

  $mont="UPDATE month SET dob='$p' where roll='$var'";
?>

One more point to make though is, you should always place session_start() the very first line of code even before any include.

I am sure it will solve your problem. Do mark it :) Thank you.

With Regards
Tushar Srivastava