Menu
Community /Pin to ProfileBookmark
@NogDogNov 16.2017 — #Yeah, simplest fix might be to just initialize that and any other variables to whatever default value (including "") you want if the conditions aren't met.
@benanamenNov 16.2017 — #
Except that he is doing it wrong. Depending on a button to be submitted in order for the script to work will completely fail in certain cases.
OP, you need to check the Request Method
Do not create variables for nothing.
Never ever put variables in your query. You need to use prepared statements. I recommend you usePDO
Completely remove the form action
Edit database
So I want to edit a row from the database through a HTML-form. This is my code so far, but I’m stuck.
I get ofcourse “Undefined variable: newMessage”, but I’m not sure how to solve it.
[code=php]
<?php
if(isset($_POST[‘submit’]))
{
if(isset($_SESSION[’email’])) {
$name = $_SESSION[’email’];
$id = intval($_GET[‘id’]);
$newMessage = $_POST[‘newMessage’];
$sql = “UPDATE posts SET message=’$newMessage’ WHERE id = $id AND name = ‘$name'”;
$result = mysqli_query($db, $sql) or die(‘SQL-error’);
}
}
?>
<form action=”.” method=”POST”>
Message:
<input type=”text” name=”newMessage” value=”<?php echo $newMessage; ?>”>
<input type=”submit” name=”submit” value=”Update”>
</form>
Sign in
to post a comment5 Comments(s) ↴
0
@NogDogNov 16.2017 — #Yeah, simplest fix might be to just initialize that and any other variables to whatever default value (including "") you want if the conditions aren't met.[code=php]
<?php
$name = '';
$id = '';
$newmessage = '';
if(isset($_POST['submit']))
{
[/code]0
@benanamenNov 16.2017 — #You wisely check right off the bat whether or not you DO have a form submission.[/QUOTE]
Except that he is doing it wrong. Depending on a button to be submitted in order for the script to work will completely fail in certain cases.
OP, you need to check the Request Method
[code=php]if ($_SERVER['REQUEST_METHOD'] == 'POST')[/code]Do not create variables for nothing.
Never ever put variables in your query. You need to use prepared statements. I recommend you use
Completely remove the form action