php - How to fix this SQL syntax error? -


how fix error?

"you have error in sql syntax; check manual corresponds mysql server version right syntax use near '' @ line 1."

i'm using wamp server. localhost:81.

<?php   $conn =mysqli_connect('localhost', 'root' , '','register');    if(isset($_post['submit']))   {      $fname=$_post['fname'];     $mname = $_post['uname'];     $email = $_post['email'];     $contact = $_post['contact'];     $gender = $_post['gender'];     $password = $_post['pass'];     $repassword = $_post['rpass'];     $sql = "insert registered(fullname,username,email,contact#,gender,password,rpassword) values('$fname','$mname','$email','$contact','$gender','$password','$repassword')";      if ($conn->query($sql) === true) {       echo "new record created successfully";       print '<script>alert("successfully submit data!");</script>';     }     else{       echo "error: " . $sql . "<br>" . $conn->error;     }     $conn->close();   } ?>

i recommend using backticks (`) around column names, prevent sql seeing else. want make sure escape data well.

$sql = "insert `registered` (`fullname`, `username`, `email`, `contact#`, `gender`, `password`, `rpassword`)               values (?, ?, ?, ?, ?, ?, ?)"; $stmt = $mysqli->prepare($sql); $stmt->bind_param('sssssss', $fname, $mname, $email, $contact, $gender, $password, $repassword); if ( $stmt->exec() ) {     //success } else {     echo "error: " . $sql . "<br>" . $conn->error; }

for more information on sql injection, , how can effect you, please check out this post.


Comments

Post a Comment

Popular posts from this blog

Magento/PHP - Get phones on all members in a customer group -

i working on custom magento extension. working around adminhtml part , i've created custom form there. here form code: <?php class vivasindustries_smsnotification_block_adminhtml_sms_sendmass_edit_form extends mage_adminhtml_block_widget_form { public function _preparelayout() { $extensionpath = mage::getmoduledir('js', 'vivasindustries_smsnotification'); $head = $this->getlayout()->getblock('head'); $head->addjs('jquery.js'); $head->addjs('vivas.js'); return parent::_preparelayout(); } protected function _prepareform() { $form = new varien_data_form(array( 'id' => 'edit_form', 'action' => $this->geturl('*/*/save', array('id' => $this->getrequest()->get...
Read more

php - Bypass Geo Redirect for specific directories -

i'm trying bypass redirect specific url within site. wondering if might able help. the code below code use, original urls replaces example.com i'd able access http://example.com/admin without redirect occuring. is there way this, , there way using own ip? function country_geo_redirect() { $country = getenv('http_geoip_country_code'); if ($country == "us" ) { wp_redirect("http://usa.example.com/"); exit; } else if ($country == "gb" ) { wp_redirect("http://uk.example.com/"); exit; } } add_action('init', 'country_geo_redirect'); you can bypass redirection code if server found ip address. if ip address == <my ip address> ' nothing here else country_georedirect() end if
Read more

php - .htaccess mod_rewrite for dynamic url which has domain names -

i want convert url ex:( example.com/link.php?url=facebook.com ) ( example.com/facebook.com.php ) how can using .htaccess. or there other process make job easier ? i tried adding script .htaccess file options +followsymlinks rewriteengine on rewriterule url-(.*)\.htm$ link.php?url=$1 but converting url adding "url-" ( example.com/url-facebook.com.php ) i want remove "url-" , want make ( example.com/facebook.com.php ) rewriteengine on rewritecond %{the_request} ^get.*link\.php\?url\= [nc] rewritecond %{request_uri} !/system/.* [nc] rewriterule (.*?)link\.php\?url\=/*(.*) /$1$2 [r=301,ne,l] not sure how above work edit of used use remove index.php url
Read more