html - Php Static Page -


i try create user profile page. visitor can see page

www.sample.com/details.php?id=1

 <?php             foreach($db->query('select * uyeler') $row) {                     echo "<tr><td>" .$row['id'] . "</td>";                     echo "<td>" .$row['username'] . "</td>";                     echo "<td>" .$row['sex'] . "</td>";                     echo "<td>" .$row['country'] . "</td>";                     echo "<td>" .$row['age'] . "</td>";                     echo "<td>" .$row['twitter'] . "</td>";                     echo "<td>" .$row['instagram'] . "</td>";                     echo "<td>" .$row['snapchat'] . "</td>";                     echo ('<td><a href="details.php?id=' .$row['id'] . '" title="panel">details</a></td>');                     echo "</tr>";                 }             ?>

when click link. detail page open.

i try create details.php these codes

<?php include('connect.php'); foreach($db->query("select country uyeler id =' .$row['id'] . '") $row)      echo $row['id'];  ?>

how can fix this? thanks

you're presumably taking id query $_get variable, rather $row. should check it's right format (i.e. if(is_numeric($_get['id'])) condition before attempting database query prevent injection attacks.

you selecting 'country' column , looking 'id'. try this:

<?php include('connect.php'); if (is_numeric($_get['id'])) {     foreach($db->query("select country uyeler id =' .$_get['id'] . '") $row)        echo $row['country']; } ?>

Comments

Post a Comment

Popular posts from this blog

Magento/PHP - Get phones on all members in a customer group -

i working on custom magento extension. working around adminhtml part , i've created custom form there. here form code: <?php class vivasindustries_smsnotification_block_adminhtml_sms_sendmass_edit_form extends mage_adminhtml_block_widget_form { public function _preparelayout() { $extensionpath = mage::getmoduledir('js', 'vivasindustries_smsnotification'); $head = $this->getlayout()->getblock('head'); $head->addjs('jquery.js'); $head->addjs('vivas.js'); return parent::_preparelayout(); } protected function _prepareform() { $form = new varien_data_form(array( 'id' => 'edit_form', 'action' => $this->geturl('*/*/save', array('id' => $this->getrequest()->get
Read more

php - .htaccess mod_rewrite for dynamic url which has domain names -

i want convert url ex:( example.com/link.php?url=facebook.com ) ( example.com/facebook.com.php ) how can using .htaccess. or there other process make job easier ? i tried adding script .htaccess file options +followsymlinks rewriteengine on rewriterule url-(.*)\.htm$ link.php?url=$1 but converting url adding "url-" ( example.com/url-facebook.com.php ) i want remove "url-" , want make ( example.com/facebook.com.php ) rewriteengine on rewritecond %{the_request} ^get.*link\.php\?url\= [nc] rewritecond %{request_uri} !/system/.* [nc] rewriterule (.*?)link\.php\?url\=/*(.*) /$1$2 [r=301,ne,l] not sure how above work edit of used use remove index.php url
Read more

Website Login Issue developed in magento -

i have website developed using magento . able login. right now, login failed. infact operations interacts user table failing. need know issue. how figure out? first clear try clear log file second make sure have not upgraded magento and 3rd make sure db accessible in magento -harry p
Read more