Menu
Community /Pin to ProfileBookmark
@NogDogJul 27.2009 — #Or to incorporate Mindzai's other suggestions, too:
Note: to see the detailed error message display_errors must be enabled, else you'll need to check the PHP error log. (This way you can turn off display_errors in the production version and not have to worry about database details being publicly displayed.)
Can you figure out what I’m missing?
Do you see anything wrong with this script. (connect page is working fine on the other pages and I’m using the same database)
This is an Alertpay IPN page
[CODE]<?php
include_once ‘connect.php’;
$ap_SecurityCode = $_POST[‘ap_securitycode’];
$ap_CustEmailAddress = $_POST[‘ap_custemailaddress’];
$ap_PurchaseType = $_POST[‘ap_purchasetype’];
$ap_Merchant = $_POST[‘ap_merchant’];
$ap_Quantity = $_POST[‘ap_quantity’];
$ap_TotalAmount = $_POST[‘ap_totalamount’];
$ap_Currency = $_POST[‘ap_currency’];
$ap_ReferenceNumber = $_POST[‘ap_referencenumber’];
$ap_Status = $_POST[‘ap_status’];
$ap_ItemCode = $_POST[‘ap_itemcode’];
$ap_Test = $_POST[‘ap_test’];
mysql_query(“INSERT INTO alertpayref VALUES (‘$ap_ReferenceNumber’, ‘$ap_ItemCode’, ‘$ap_TotalAmount’, ‘$ap_CustEmailAddress’)”);
?>
Sign in
to post a comment5 Comments(s) ↴
0
@NogDogJul 27.2009 — #Or to incorporate Mindzai's other suggestions, too:[code=php]
$query = sprintf(
"INSERT INTO alertpayref VALUES ('%s', '%s', '%s', '%s')",
mysql_real_escape_string($_POST['ap_ReferenceNumber']),
mysql_real_escape_string($_POST['ap_ItemCode']),
mysql_real_escape_string($_POST['ap_TotalAmount']),
mysql_real_escape_string($_POST['ap_CustEmailAddress'])
);
$result = mysql_query($query);
if (!$result) {
user_error(mysql_error()."<br />$query");
echo 'INSERT failed.';
} else {
echo 'INSERT succeeded!';
}
[/code]Note: to see the detailed error message display_errors must be enabled, else you'll need to check the PHP error log. (This way you can turn off display_errors in the production version and not have to worry about database details being publicly displayed.)