Can not store data in two tables - php

Question

I am trying to store data in two tables, using two different queries.
one of them is working fine but other one is not saving anything . These two queries are part of full page script. The frist queries in both the cases are part of the scripts and working fine.
the 2nd queries are written by me to make another records of user clicks.
Table structure for actcontest .. table name is actcontest not act_contest, this was copy/paste mistake here:[corrected]
userid varchar(50)
type varchar(50)
points int(10)
date date
Case 1:
The working query:
$sql = $Db1->query('Insert into ptcwalllogs (userid, user_earned)
values ('.$credituser.','.$rate.')');
Problem with the query:
$sqlact = $Db1->query('Insert into actcontest (userid, type, points, date)
values ('$username','ptcwall',6,now())');
Case 2:
working query:
$Db1->query("INSERT INTO `likesasapaddon` (user_id, page_id,date)
VALUES('{$thismemberinfo[userid]}', '{$get['pageid']}',NOW())");
Problem with the query:
$Db1->query("INSERT INTO `actcontest` (userid, type, points, date)
VALUES ('$username','facebook',6,now())");
in both the cases I want to store values in same table.
Below is the script file for case 1:
This is postback from one the providers.
<?php
$date1 = date('Y-m-d');
include("config.php");
include("includes/mysql.php");
$Db1 = new DB_sql;
$Db1->connect($DBHost, $DBDatabase, $DBUser, $DBPassword);
$your_pwd = ""; /* Postback Password */
$vip=getenv('REMOTE_ADDR');
$sent_pw = $_GET['pwd'];
$credited = intval($_GET['c']);
$credituser = intval($_GET['usr']);
$rate = trim($_GET['r']);
$type = intval($_GET['t']);
$allowed_ip = array('72.52.253.202');//PTCWall's IPS.
if(in_array($vip, $allowed_ip) && $sent_pw == $your_pwd)
{
if($credited == '1')
{
if($type == '1')
{
$run = $Db1->query('UPDATE user SET balance=balance+'.$rate.' WHERE userid = '.$credituser);
// This line below is used to store clicks locally
$sql = $Db1->query('Insert into ptcwalllogs (userid, user_earned) values ('.$credituser.','.$rate.')');
$sqlact = $Db1->query("Insert into actcontest (userid, type, points, date)
values ('".mysqli_real_escape_string($username)."','ptcwall',6,now())");
// $sqlact = $Db1->query('Insert into actcontest (userid, type, points, date) values ("lorry","ptcwall",6,now())');
if($run)
{
exit('ok');
} else{
exit('issue');
}
}elseif($type == '2'){
$run = $Db1->query('UPDATE user SET points=points+'.$rate.' WHERE userid = '.$credituser);
if($run)
{
exit('ok');
} else{
exit('issue');
}
}
}elseif($credited == '2')
{
if($type == '1')
{
$run = $Db1->query('UPDATE user SET balance=balance-'.$rate.' WHERE userid = '.$credituser);
if($run)
{
exit('ok');
} else{
exit('issue');
}
}elseif($type == '2'){
$run = $Db1->query('UPDATE user SET points=points-'.$rate.' WHERE userid = '.$credituser);
if($run)
{
exit('ok');
} else{
exit('issue');
}
}
}
}
else{
die();
}
//FILE 03302014
?>
After the Var dump:
saved in separate file.
daata.php
<?php
$sqlact = $Db1->query("Insert into actcontest (userid, type, points, date)
values ('".mysqli_real_escape_string($username)."','ptcwall',6,now())");
var_dump($sqlact);
echo " success asdasdasdasdasdasdasdasdas " ;
?>
error:
Warning: mysqli_real_escape_string() expects exactly 2 parameters, 1 given in ./xxxx/daata.php on line 3
bool(true)
Kindly guide.

Answer 1

Warning: mysqli_real_escape_string() expects exactly 2 parameters, 1 given in ./xxxx/daata.php on line 3 bool(true)
This warning means that you need to pass your DB connection to it, that is the second parameter it is expecting.
('".mysqli_real_escape_string($Db1, $username)."','ptcwall',6,now())")
Consult the documentation:
http://php.net/manual/en/mysqli.real-escape-string.php
$sqlact = $Db1->query("Insert into act_contest (userid, type, points, date)
values ('".mysqli_real_escape_string($Db1, $username)."','ptcwall',6,now())");
$Db1->query("INSERT INTO `actcontest` (userid, type, points, date)
VALUES ('".mysqli_real_escape_string($Db1, $username)."','facebook',6,now())");
Also, make sure that all your columns do exist in your table.
Add:
die('There was an error running the query [' . $Db1->error . ']');
This will signal an error, should there be any.
I.e.:
if($run)
{
exit('ok');
} else{
die('There was an error running the query [' . $Db1->error . ']');
}
Follow that same method for all your queries.
It's also a good thing to add error reporting to the top of your file(s) which will help during production testing.
error_reporting(E_ALL);
ini_set('display_errors', 1);
should $username or any other variables be undefined.

Answer 2

Here are working queries:
$sqlact = $Db1->query("Insert into act_contest (userid, type, points, date)
values ('".mysqli_real_escape_string($username)."','ptcwall',6,now())");
$Db1->query("INSERT INTO `actcontest` (userid, type, points, date)
VALUES ('".mysqli_real_escape_string($username)."','facebook',6,now())");
NB: Always use mysqli_real_escape_string (or it equivalent) for strings in SQL query. Or your application will be hacked soon with SQL injection.

Answer 3

Are you sure of your table name "actcontest" ? In the first case, you put an underscore in it and not in the second one.
Are you also sure of this table schema : userid, type, points and date ? Maybe you made a little typo ?
If I were you, I'll first check all of that.