Menu
Community /Pin to ProfileBookmark
@NogDogOct 19.2010 — #mysql_query() does not return a string, it returns a query resource which must then be used via a mysql_fetch_*() or mysql_result() function to get the results (if there were any).
Additionally, you should be able to get all the database info via a single query, which would me more efficient than a separate query for each field. Also, you need to "sanitize" any user-supplied data before using it in your query -- seemysql_real_escape_string ().
[RESOLVED] A bit of trouble with mailing
[code=php]if(isset($_POST[submit])){
if(isset($_POST[‘username’])){
$username = $_POST[‘username’];
$password = mysql_query(“SELECT Password FROM users WHERE ‘$username’; = Username”);
$to = mysql_query(“SELECT Email FROM users WHERE ‘$username’; = Username”);
} elseif(isset($_POST[’email’])){
$to = $_POST[’email’];
$password = mysql_query(“SELECT Password FROM users WHERE ‘$to’; = Email”);
$username = mysql_query(“SELECT Username FROM users WHERE ‘$to’; = Email”);
} else {
echo “<div style=’color: red;’>Please put something.</div>”;
}
$subject = “Your Railsexy Password”;
$message = “Hey, “. $username .”.
You asked for a new password on the railsexy.com gallery, and so we gave you one. If you dont want it, or if you are not “. $username .”, all you will have to do is nothing.
Otherwise, your password is “. $password .”. Oh and please dont respond to this.”;
if (@mail($to, $subject, $message)) {
echo(‘<p>Mail sent successfully.</p>’);
} else {
echo(‘<p>Mail could not be sent.</p>’);
}
}
As featured here [url]http://www.railsexy.com/newsite/?p=3
Any thoughts?
Sign in
to post a comment5 Comments(s) ↴
0
@NogDogOct 19.2010 — #mysql_query() does not return a string, it returns a query resource which must then be used via a mysql_fetch_*() or mysql_result() function to get the results (if there were any).Additionally, you should be able to get all the database info via a single query, which would me more efficient than a separate query for each field. Also, you need to "sanitize" any user-supplied data before using it in your query -- see