php - update query, updating multiple data -

-

i want update multiple data using code, problem is, when tried it, updates whole data has same category id , supposed update individually. solution. please help. in advance :)

<?php if (isset($_get['pid'])){     $view="";     $targetid = $_get['pid'];     $sql = mysql_query("select specs, category_id, price specs category_id='$targetid'");                                 $productcount = mysql_num_rows($sql);                                     if($productcount > 0){                                         while($row = mysql_fetch_array($sql)){                                         $specs = $row["specs"];                                         $category_id = $row["category_id"];                                          $price = $row["price"];                                         $view .=  '<div class="control-group">                             <label class="control-label" >specs</label>                             <div class="controls">                             <input type="text"  placeholder="specs" name="specs" value="'.$specs.'">                             </div>                             </div>                             <div class="control-group">                             <label class="control-label" >price</label>                             <div class="controls">                             <input type="text"  placeholder="price" name="price" value="php&nbsp;'.number_format($price, 2).'">                             </div>                             </div>';                                 }                                 }         }     ?>     <?php     if (isset($_post['specs'])){      $pid = mysql_real_escape_string($_post['thisid']);     $specs = mysql_real_escape_string($_post['specs']);;     $price = mysql_real_escape_string($_post['price']);     $sql= mysql_query("update specs set specs='$specs', price='$price' category_id='$pid'");      header("location: manageproducts.php");     exit();     }     ?>

and heres html.

 <div class="container">     <div class="page-header">       <h1>manage products</h1>     </div>     <div class="row-fluid ">              <div class="box span12center-align" >                 <div class="box-header well" data-original-title>                     <center><h2><i class="icon-edit"></i> edit specifications </h2></center>                 </div>                  <div class="box-content" >                     <form class="form-horizontal" action="" method='post'>                          <fieldset>                           <?php echo $view; ?>                             <div class="form-actions">                             <input name="thisid" type="hidden" value="<?php echo $targetid; ?>">                             <button type="submit" class="btn btn-primary" name="add_product">update item</button>                             <button class="btn">cancel</button>                           </div>                         </fieldset>                     </form>                 </div>             </div><!--/span-->          </div><!--/row--></center>         </div>         </div>         </div>

you need add primary key where-clause of row want update, you're updating rows category_id.

so add primary key id table (if table doesn't have 1 already) , set auto-increment. modify select query:

"select id, specs, category_id, price specs category_id='$targetid'"

add id hidden input field.

then can modify update query this:

"update specs set specs='$specs', price='$price' category_id='$pid' , id='$id'"

sql injection alert

you should know code have written dangerous , prone sql injection. never, ever, use get/post variables directly in query. please use mysqli prepared statements or pdo.


Comments

Post a Comment

Popular posts from this blog

css - Which browser returns the correct result for getBoundingClientRect of an SVG element? -

-
this svg contains rect overflows svg element: <svg id='svg' width='10' height='10'> <rect x='-10' y='-10' width='30' height='30'/> </svg> chrome 28 , opera 12 return getboundingclientrect() svg element width , height of 10. firefox 23 reports width , height of 30. correct? jsfiddle the relevant spec cssom , delegates svg spec if svg element not "have associated css layout box". haven't found definition of "having associated css layout box", correct result seem hinge on definition, getbbox returns 30x30 rect in browsers. this firefox bug fixed now, fix in firefox nightlies , should make through firefox 33 released on 14 october 2014. see bug 530985 details.
Read more

gcc - Calling fftR4() in c from assembly -

-
i trying asm fft implementation www.embeddedsignals.com work. running make gives error: undefined reference fftr4(short*, short*, int) at top of asm have .syntax unified .thumb .global fftr4 .type fftr4, %function and there #define's associate c functions arguments registers followed macros fftr4 function uses. after that, fftr4 called .thumb_func fftr4: stmfd sp!, {r4-r11, lr} mov tmp0, #0 // bit reversed counter mov tmp1, #0 .word 0xf3a2fa92 //rbit r3,r2 //rbit r,n lsl r,#3 and c code follows: void fftr4(short *y, short *x, int n); short x[512]; short y[512]; int i; void loop() { (i=0;i<512;i++) x[i]=0; (i=0;i<512;i=i+8) { x[i+0]=16384; x[i+2]=16384; x[i+4]=-16384; x[i+6]=-16384;} fftr4(y, x, 256); serialusb.println(y[128]); serialusb.println(y[129]); serialusb.println(y[384]); serialusb.println(y[385]); // expected results: //y[128]is 8191; y[129] -8190 y[...
Read more

.htaccess - Matching full URL in RewriteCond -

-
i'm trying block post access site (and return 403), except 2 ip's , 1 url ( http://mydomain.com/about-us/contact-us/ ). here's have: rewritecond %{request_method} post rewritecond %{remote_addr} !=1.2.3.4 rewritecond %{remote_addr} !=4.3.2.1 rewritecond %{request_uri} !^http://mydomain.com/about-us/contact-us/$ rewriterule ^ / [f] these rules allowing access ip properly, contact page still not accessible. i'm not sure i'm using request_uri correctly? i've tried variations relative urls rewritecond %{request_uri} !^/about-us/contact-us$ , rewritecond %{request_uri} !^/about-us/contact-us/$ without luck. what doing wrong please? it looks me rule on file name specific. if relax bit, should work. made few other esthetic tweaks. give try: rewritecond %{request_method} post rewritecond %{remote_addr} !^1.2.3.4 rewritecond %{remote_addr} !^4.3.2.1 rewritecond %{request_uri} !about-us/contact-us rewriterule ^ - [f]
Read more