Page 1 of 1

Generated form, how to get POST content and insert it in mys

Posted: Sun Aug 12, 2012 9:30 pm
by Peuplarchie
Good day all,
I'm working on a thing which lets the member create, edit, delet it's own table and data.

I have a form in a table which list the table data, this form should add a row.
Here is it's code :

Code: Select all

$tid = $_GET['id'];
$tname = $_GET['tname'];

$con = mysql_connect($server, $login, $password);
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db($db, $con);

$query = "SELECT * FROM $tname";
$resultv = mysql_query($query); 
if (($resultv)||(mysql_errno == 0))
{
  echo "<table width='100%' border=\"1\">\n";
  echo "<tr>";
  echo "<td align='center'><b>Options</b></td>";  
  if (mysql_num_rows($resultv)>0)
  {
          //loop thru the field names to print the correct headers
          $i = 0;
          while ($i < mysql_num_fields($resultv))
          {
       echo "<th>". mysql_field_name($resultv, $i) . "  <a href=\"tableau.php?act=delcol&opt=tableau&tname=".$tname."&cname=".mysql_field_name($resultv, $i)."\" title=\"DELETE COLUMN : ". mysql_field_name($resultv, $i) . "\"><img src=\"Images/stock_delete-column.png\" align=\"bottom\"></a></th>\n";
       
       $i++;
    }
    echo "</tr>";
   
 echo "<tr><form  name=\"formadd\" method=\"post\" action=\"tableau.php?add=row\">\n";
          //loop thru the field names to print the correct headers
          $i = 0;
	  echo "<td align='center'><input type=\"submit\" value=\"Ajouter\"></td>";
          while ($i < mysql_num_fields($resultv))
          {
          echo "<td align='center'><input type=\"text\" name=\"". mysql_field_name($resultv, $i) . "\"</td>\n";
          $i++;
          }
echo "</form></tr>\n";  
   
    //display the data
    while ($rowv = mysql_fetch_array($resultv,MYSQL_ASSOC))
    {
      echo "<tr><td><br></td>\n";
      foreach ($rowv as $data)
      {
       if ($data == "") {
        echo "<td align='center'><br></td>\n";
       }else{	
        echo "<td align='center'>". $data . "</td>\n";
       }
      }
    }
  }else{
    echo "<tr><td colspan='" . ($i+1) . "'>No Results found!</td></tr>\n";
  }

echo "</table>";  
}else{
  echo "Error in running query :". mysql_error();
}


My issue is to receive the data and insert it in the database.
I have know clue how to put the POSTs into variable so I can Insert it in the query..

Can somebody help me ?

Take care !

Re: Generated form, how to get POST content and insert it in

Posted: Tue Aug 14, 2012 12:54 pm
by requinix
Woah, woah, hold on a second.
Peuplarchie wrote:I'm working on a thing which lets the member create, edit, delet it's own table and data.
You're letting people alter your database structure? Why?

Re: Generated form, how to get POST content and insert it in

Posted: Tue Aug 14, 2012 1:56 pm
by Benjamin
This is not scalable. Further if you think this is the best way you are not qualified enough to consider the security aspects.

You want to use EAV: http://en.wikipedia.org/wiki/Entity%E2% ... alue_model