php/mysql database searching - php

Can anyone see why the code below is not working? Is it because of the deprecated sql syntax? I'm stumped with this one.
<?php
mysql_connect("localhost",$username,$password);
#mysql_select_db($database) or die( "Unable to select database");
$usersearch=$_POST['search'];
$query="SELECT * FROM tracks WHERE 'artist' LIKE '%$usersearch%'";
$result=mysql_query($query);
$num=mysql_numrows($result);
mysql_close();
while($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
echo $row["artist"]." | ".$row["name"];
echo "<br>";
}
?>

First, do not use mysql_* please. This extension is deprecated as of PHP 5.5.0.
http://php.net/manual/en/function.mysql-query.php
You can use mysqli_query() or PDO::query().

Probably beacuse you have single quotes(') and not ` when selecting your table. And as pointed out don't use mysql_* use PDO or mysqli, even if its just a school project(old habits die hard). Also you could add
mysql_query($query) or die($mysql_error());
This will probably point out whats wrong..
and for last, please escape dynamic input variables

add to the top of page:
error_reporting(E_ALL);
ini_set("display_errors", 1);
and open the page in an browser. are there any errors?
change (this mutes errors)
#mysql_select_db($database) or die( "Unable to select database");
to :
mysql_select_db($database) or die( "Unable to select database");
A word of advice though, better to use the MySQLi or [PDO_MySQL][3] instead of mysql_connectsince it will soon be deprecated:
Warning
This extension is deprecated as of PHP 5.5.0, and will be removed in the future. Instead, the MySQLi or PDO_MySQL extension should be used. See also MySQL: choosing an API guide and related FAQ for more information. Alternatives to this function include:
mysqli_connect()
you can find more info of how to use them on this answer.
UPDATE
check if you get an empty result, add :
$num=mysql_numrows($result);
if ($num === 0) echo "Empty result"
and open the page again. if the page is still blank, change:
echo $row["artist"]." | ".$row["name"];
echo "<br>";
to:
vardump($row);
UPDATE 2
If you did get Empty result, than add
echo $query;
and try to open the page and run the query manually

Related

mysqli_fetch_array not working properly PHP

I've been told that I was using an deprecated version of PHP, mysql_query, instead of the newer version mysqli_query, and soon it will be remove. Knowing that, I quickly tried to update all of my old, deprecated codes into the newer code. Doing that, I quickly ran into a problem, but I'm not sure what I'm doing wrong. Please take a look:
<?php
$connect = mysqli_connect('server','username','password','database');
$fetch = mysqli_query($connect,"SELECT username FROM userLogin");
while($row=mysqli_fetch_array($fetch,MYSQLI_NUM)){
//do something
}
?>
output:
Warning: mysqli_fetch_array() expects parameter 2 to be long, string given in /home/a2056400/public_html/test4.php on line 8
I have a feeling the error message has something to do with the conditional statement inside the while loop, but I'm not sure what is wrong with it. Please help in any way. Thank you.
You are not connecting to the database properly.
$connect = mysqli_connect('server','username','password','database');
if (mysqli_connect_errno()) {
echo "Failed to connect to MySQL: " . mysqli_connect_error();
}
$fetch = mysqli_query($connect,"SELECT username FROM userLogin");
while($row=mysqli_fetch_array($fetch,MYSQLI_NUM)) {
//do something
}

PHP and MySQL error when inserting user entered values into table

everything functions on the side of data validation and error gathering and such, I get a problem specifically where $r is being executed. I always get the echo error. I've used this same bit of code before, but for some reason isn't working. Just need a second look of eyes at it perhaps.
if (empty($errors)){
$q = "INSERT INTO testTable (test1, test2) VALUES ('Test', 'Test')";
$r = #mysqli_query($dbc, $q);
if($r){
echo 'Complete!';
}
else{
echo 'error';
}
mysqli_close($dbc);
include('footer.html');
exit();
I can enter the statement manually in MySQL and it will add it to the table, so I don't think its a syntax error there, I am just a little tired at this point.
"I'm getting a lot of warnings saying that parameter 1 of mysqli_xxx must be mysqli. So does that mean that my $dbc variable isn't working properly?"
The reason for that may very well be because your DB connection method is probably based on mysql_connect() or PDO to connect with.
Something you haven't posted in your question.
Those different MySQL APIs do not intermix with each other.
mysql_ + mysqli_ or PDO = no love. mysqli_ + PDO, same thing.
Refer to both manuals:
MySQLi: http://php.net/manual/en/function.mysqli-connect.php
PDO: http://php.net/manual/en/pdo.connections.php
and use only "one" MySQL API, from beginning to end and not a "mix of".
You should also remove the # symbol(s) from your code. Those are error suppressors and won't help you when debugging code.
So your connection for MySQLi_ would look something like this:
$dbc = mysqli_connect("myhost","myuser","mypassw","mybd")
or die("Error " . mysqli_error($dbc));
Unlike mysql_:
$dbc = mysql_connect('localhost', 'mysql_user', 'mysql_password');
if (!$dbc) {
die('Could not connect: ' . mysql_error());
}

Row not showing up in phpMyAdmin

I tried inserting a row in a table using a php and HTML file in dreamweaver however it is not showing up when I refresh phpMyAdmin page?
PHP
<?php
$username="root";
$database="conception";
mysql_connect("127.0.0.1" ,$username);
#mysql_select_db($database) or die( "Unable to select database");
$query = "INSERT INTO order VALUES ('','Shirt','M','black','that photo','L','none','UL','none','Sharpiee','#E0E0E0','BIU','Lobster','bottom','L')";
mysql_query($query);
mysql_close();
?>
I also used "localhost" instead of 127.0.0.1 but that did not work aswell. When i press the button in my form first it showed mysql_connect error but then i removed the password as a perimeter and onCLick it moves to a blank page.
First of all don't use mysql extension any more, it's deprecated of PHP 5.5 and will be removed in future, so use mysqli or PDO extension instead. Second mysql_connect() function should have 3 parameters. Check it here.
ORDER is a MySQL reserved keyword. That word is used for doing ORDER BY, an optimization method.
http://dev.mysql.com/doc/refman/5.5/en/reserved-words.html
Either wrap it in backticks or use another word for it (rename your column to "orders") which is OK.
$query = "INSERT INTO `order` VALUES ...
Add error reporting to the top of your file(s) which will help during production testing.
error_reporting(E_ALL);
ini_set('display_errors', 1);
which would have signaled the error.
Also add or die(mysql_error()) to mysql_query().
Footnotes:
mysql_* functions deprecation notice:
http://www.php.net/manual/en/intro.mysql.php
This extension is deprecated as of PHP 5.5.0, and is not recommended for writing new code as it will be removed in the future. Instead, either the mysqli or PDO_MySQL extension should be used. See also the MySQL API Overview for further help while choosing a MySQL API.
These functions allow you to access MySQL database servers. More information about MySQL can be found at » http://www.mysql.com/.
Documentation for MySQL can be found at » http://dev.mysql.com/doc/.
Your present code is open to SQL injection. Use mysqli with prepared statements, or PDO with prepared statements.
Look up DB connection method for mysql_ functions:
http://php.net/manual/en/function.mysql-connect.php
From example #1
<?php
$link = mysql_connect('localhost', 'mysql_user', 'mysql_password');
if (!$link) {
die('Could not connect: ' . mysql_error());
}
echo 'Connected successfully';
mysql_close($link);
?>
From mysql_select_db - DB selection.
From example #1
<?php
$link = mysql_connect('localhost', 'mysql_user', 'mysql_password');
if (!$link) {
die('Not connected : ' . mysql_error());
}
// make foo the current db
$db_selected = mysql_select_db('foo', $link);
if (!$db_selected) {
die ('Can\'t use foo : ' . mysql_error());
}
?>

Displaying Random Row from SQL Database

I have been working for days now and I am at a dead end. After talking with GoDaddy support I am positive that I have the correct hostname, username/password when I run the script but it still cannot get past die().
Ultimately I am attempting to pull a single question from a database. I have combed this website but nothing i found seems to answer my question. Please help.
<?php
$hostname='localhost';
$username='username';
$password='password';
$dbname='qod';
$usertable='Questions';
$userfield='question';
mysql_connect($hostname,$username, $password) or die ("<html><script language='JavaScript'>alert('Unable to access the Question of the Day! Please try again later.'),history.go(-1)</script></html>");
mysql_select_db($dbname);
# Check If Record Exists
$query = 'SELECT $.userfield FROM $.usertable ORDER BY RAND() LIMIT 1';
$result = mysql_query($query);
if($result){
while($row = mysql_fetch_array($result)){
$name = $row[$yourfield];
echo "Name: ".$name;}
}
?>
You are using dots for your SELECT variables where there shouldn't be any.
SELECT $.userfield FROM $.usertable, then calling them with:
$usertable='Questions';
$userfield='question';
Remove them from your SELECT and use proper error reporting techniques such as :
<?php
error_reporting(E_ALL);
ini_set('display_errors', 1);
// rest of code
and
or die('Could not connect: ' . mysql_error());
also a dollar sign in [$yourfield] for your column name; remove it also.
You should be using quotes: I.e.: ['yourfield'] - yourfield being the column name in your table that you wish to show.
Footnotes:
mysql_* functions deprecation notice:
http://www.php.net/manual/en/intro.mysql.php
This extension is deprecated as of PHP 5.5.0, and is not recommended for writing new code as it will be removed in the future. Instead, either the mysqli or PDO_MySQL extension should be used. See also the MySQL API Overview for further help while choosing a MySQL API.
These functions allow you to access MySQL database servers. More information about MySQL can be found at » http://www.mysql.com/.
Documentation for MySQL can be found at » http://dev.mysql.com/doc/.
Use mysqli_* with prepared statements, or PDO with prepared statements.

Deprecated: mysql_connect() [duplicate]

This question already has answers here:
Why shouldn't I use mysql_* functions in PHP?
(14 answers)
The mysql extension is deprecated and will be removed in the future: use mysqli or PDO instead [duplicate]
(1 answer)
Closed 1 year ago.
I am getting this warning, but the program still runs correctly.
The MySQL code is showing me a message in PHP:
Deprecated: mysql_connect(): The mysql extension is deprecated and
will be removed in the future: use mysqli or PDO instead in
C:\xampp\htdocs\task\media\new\connect.inc.php on line 2
My connect.inc.php page is
<?php
$connect = mysql_connect('localhost','root','');
mysql_select_db('dbname');
?>
What does this mean and how can I eliminate the message?
There are a few solutions to your problem.
The way with MySQLi would be like this:
<?php
$connection = mysqli_connect('localhost', 'username', 'password', 'database');
To run database queries is also simple and nearly identical with the old way:
<?php
// Old way
mysql_query('CREATE TEMPORARY TABLE `table`', $connection);
// New way
mysqli_query($connection, 'CREATE TEMPORARY TABLE `table`');
Turn off all deprecated warnings including them from mysql_*:
<?php
error_reporting(E_ALL ^ E_DEPRECATED);
The Exact file and line location which needs to be replaced is "/System/Startup.php > line: 2 " error_reporting(E_All); replace with error_reporting(E_ALL ^ E_DEPRECATED);
You can remove the warning by adding a '#' before the mysql_connect.
#mysql_connect('localhost','root','');
but as the warning is telling you, use mysqli or PDO since the mysql extension will be removed in the future.
Deprecated features in PHP 5.5.x
The original MySQL extension is now deprecated, and will generate E_DEPRECATED errors when connecting to a database. Instead, use the **MYSQLi or PDO_MySQL extensions.**
Syntax:
<?php
$connect = mysqli_connect('localhost', 'user', 'password', 'dbname');
Also, replace all mysql_* functions into mysqli_* functions
instead of
<?php
$connect = mysql_connect('localhost','root','');
mysql_select_db('dbname');
?>
This warning is displayed because a new extension has appeared.
It suppouse that you still can use the old one but in some cases it´s impossible.
I show you how I do the connection with database. You need just change the values of the variables.
My connection file: connection.php
<?php
$host='IP or Server Name (usually "localhost") ';
$user='Database user';
$password='Database password';
$db='Database name';
//PHP 5.4 o earlier (DEPRECATED)
$con = mysql_connect($host,$user,$password) or exit("Connection Error");
$connection = mysql_select_db($db, $con);
//PHP 5.5 (New method)
$connection = mysqli_connect($host,$user,$password,$db);
?>
The extension changes too when performing a query.
Query File: "example.php"
<?php
//First I call for the connection
require("connection.php");
// ... Here code if you need do something ...
$query = "Here the query you are going to perform";
//QUERY PHP 5.4 o earlier (DEPRECATED)
$result = mysql_query ($query) or exit("The query could not be performed");
//QUERY PHP 5.5 (NEW EXTENSION)
$result = mysqli_query ($query) or exit("The query could not be performed");
?>
This way is using MySQL Improved Extension, but you can use PDO (PHP Data Objects).
First method can be used only with MySQL databases, but PDO can manage different types of databases.
I'm going to put an example but it´s necessary to say that I only use the first one, so please correct me if there is any error.
My PDO connection file: "PDOconnection.php"
<?php
$hostDb='mysql:host= "Here IP or Server Name";dbname="Database name" ';
$user='Database user';
$password='Database password';
$connection = new PDO($hostDb, $user, $password);
?>
Query File (PDO): "example.php"
<?php
$query = "Here the query you are going to perform";
$result=$connection->$query;
?>
To finish just say that of course you can hide the warning but it´s not a good idea because can help you in future save time if an error happens (all of us knows the theory but if you work a lot of hours sometimes... brain is not there ^^ ).
That is because you are using PHP 5.5 or your webserver would have been upgraded to 5.5.0.
The mysql_* functions has been deprecated as of 5.5.0
Source
mysql_*, is officially deprecated as of PHP v5.5.0 and will be removed in the future.
Use mysqli_* function or pdo
Read Oracle Converting to MySQLi
Its just a warning that is telling you to start using newer methods of connecting to your db such as pdo objects
http://code.tutsplus.com/tutorials/php-database-access-are-you-doing-it-correctly--net-25338
The manual is here
http://www.php.net/manual/en/book.pdo.php
Warning "deprecated" in general means that you are trying to use function that is outdated. It doeasnt mean thaqt your code wont work, but you should consider refactoring.
In your case functons mysql_ are deprecated. If you want to know more about that here is good explanation already : Why shouldn't I use mysql_* functions in PHP?
PDO class replaces these methods. Example for Mysql or MariaDB :
$BDD_SQL = new PDO('mysql:host='.BDD_SQL_SERVER.';dbname='.BDD_SQL_BASE.';charset=utf8',
BDD_SQL_LOGIN, BDD_SQL_PWD,
array(
PDO::ATTR_EMULATE_PREPARES => false,
PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION, //launch exception if error
PDO::ATTR_DEFAULT_FETCH_MODE=> PDO::FETCH_ASSOC
));
Source : PDO Class
<?php
$link = mysqli_connect('localhost','root','');
if (!$link) {
die('Could not connect to MySQL: ' . mysqli_error());
}
echo 'Connection OK'; mysqli_close($link);
?>
This will solve your problem.
If you have done your coding then
ini_set("error_reporting", E_ALL & ~E_DEPRECATED);
is good option but if you are in beginning then definitely you should use mysqli.
Well, i just faced such message today when i moved to new hosting! anyway i have tried to change the "mySQL" to "mySQLi" but not working, so i have done this:
<?php
# FileName="Connection_php_mysql.htm"
# Type="MYSQL"
# HTTP="true"
# Turn off all error reporting
error_reporting(0);
$connect_myconn = "Database Connection";
$hostname_myconn = "localhost";
$database_myconn = "db name";
$username_myconn = "user name";
$password_myconn = "pass";
$myconn = mysql_connect($hostname_myconn, $username_myconn, $password_myconn) or die("<h1 style=margin:0;>A MySQL error has occurred.</h1><p><b>Your Query:</b> " . $connect_myconn . "<br /> <b>Error Number:</b> (" . mysql_errno() . ")</p>" . mysql_error());
mysql_select_db($database_myconn, $myconn);
?>
The trick is to set error reporting off :)
# Turn off all error reporting
error_reporting(0);
For PHP 7+ you can use this code instead:
ini_set('display_errors', 0);
ini_set('log_errors', 1);
Thanks

Categories