Page 1 of 1

error with mysql!!

Posted: Mon Sep 27, 2004 12:26 pm
by LostMyLove
i was ahving an errors, cannot set an new acc on my scipt i was doing!!

the code:

Code: Select all

<?php
//install.php
// installation module of x-gallery 

//get the id to define how to do

//error_reporting(E_PARSE | E_WARNING | E_NOTICE);
    
    @header('Content-type: text/html');
    
           switch ($_GET['act']) {
       
        case '1':  //the starting page...
                do_start();
            break;
            
        case '2': // installation of mysql tables
                do_install_db();
            break;
            
        case '3': // do set admin user
               do_admin();
            break;
            
        case '4': //installed succesfull!
               do_installed();
            break;
            
        default:  // the starting page is default in no act is set...
               do_start();
            break;
    }
    
    
    

 function do_start() {
 
 $HTMLOUT ="";
 print <<<EOF
 
                <html>
                  <head>
                    <title>Welcome to the X-Gallery installation program!</title>
                      <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
                    </head>

           <body>
       <div align="center">
        <p><font color="#000000" face="Verdana, Arial, Helvetica, sans-serif">Welcome 
                                    to the X-Gallery Installation Program!!</font></p>
      <p>&nbsp;</p>
        <p>&nbsp;</p>
        <p>&nbsp;</p>
        <p>&nbsp;</p>
        <p><font color="#000000" size="2" face="Verdana, Arial, Helvetica, sans-serif"><a href="http://127.0.0.1/xgallery/install.php?act=2"><strong>Next 
            Step >></strong></a></font></p>
          </div>
      </body>
      </html>
EOF;
    
    
 }
 
 
 
 function do_install_db() {
 $HTMLOUT ="";
 
  print <<<EOF
  
    <html>
<head>
<title>Welcome to the X-Gallery installation program!</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<body>
<div align="center">
  <p><font color="#000000" face="Verdana, Arial, Helvetica, sans-serif">Welcome 
    to the X-Gallery Installation Program!!</font></p>
  <p><font size="2" face="Verdana, Arial, Helvetica, sans-serif">Set Database</font></p>
  <p>&nbsp;</p>
  <form action="http://127.0.0.1/xgallery/install.php?act=3" method="post" name="db" id="db">
    <p>Database server: 
      <input name="dbserver" type="text" id="dbserver" size="15">
    </p>
    <p>Database Name: 
      <input name="dbname" type="text" id="dbname" size="15">
    </p>
    <p>UserName: 
      <input name="dbuser" type="text" id="dbuser" size="15">
    </p>
    <p>User Password: 
      <input name="userpass" type="text" id="userpass" size="15">
    </p>
    <p>
      <input type="submit" name="Submit" value="Submit">
    </p>
    </form>
  <p><font size="2" face="Verdana, Arial, Helvetica, sans-serif"></font></p>
</div>
</body>
</html>

EOF;


}


function do_admin() {


mysql_connect($_POST['dbserver'], $_POST['dbuser'], $_POST['userpass']);
mysql_select_db($_POST['dbname']);

mysql_query(" CREATE TABLE x_photos (
              id INT NOT NULL AUTO_INCREMENT,
              photos TEXT,
             userposted TEXT,
              PRIMARY KEY (id)
              )") or die(mysql_error());
              
mysql_query(" CREATE TABLE x_categories (
              cid INT NOT NULL AUTO_INCREMENT,
              status INT NOT NULL DEFAULT '1',
              name TEXT,
              PRIMARY KEY(cid)
              )") or die(mysql_error());
              
mysql_query(" CREATE TABLE x_conf (
              maint INT DEFAULT '0',
              gname VARCHAR(150) DEFAULT 'X-Gallery'
              )") or die(mysql_error());
              
mysql_query(" CREATE TABLE x_users (
              id INT NOT NULL AUTO_INCREMENT,
              username TEXT,
              password TEXT,
              email TEXT,
              iadm INT DEFAULT '0',
              PRIMARY KEY(id)
              )") or die(mysql_error());
              
print <<<EOF

  <html>
<head>
<title>Welcome to the X-Gallery installation program!</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<body>
<div align="center">
  <p><font color="#000000" face="Verdana, Arial, Helvetica, sans-serif">Welcome 
    to the X-Gallery Installation Program!!</font></p>
  <p>&nbsp;</p>
  <p><font color="#FF0000" face="Verdana, Arial, Helvetica, sans-serif">The Database 
    installation Done!</font></p>
  <p><font size="2" face="Verdana, Arial, Helvetica, sans-serif">Set Admin</font></p>
  <p>&nbsp;</p>
  <form action="http://127.0.0.1/xgallery/install.php?act=4" method="post" name="admin" id="admin">
    <p>Admin Username: 
      <input name="admnick" type="text" id="admnick" size="15">
    </p>
    <p>Admin Password: 
      <input name="admpwd" type="password" id="admpwd" size="15" maxlength="8">
    </p>
    <p>Admin email: 
      <input name="admmail" type="text" id="admmail" size="25">
    </p>
    <p>
      <input type="submit" name="Submit" value="Submit">
    </p>
  </form>
  <p><font size="2" face="Verdana, Arial, Helvetica, sans-serif"></font></p>
  <p>&nbsp;</p>
  
  <p><font size="2" face="Verdana, Arial, Helvetica, sans-serif"></font></p>
</div>
</body>
</html>

EOF;



}


function do_installed() {

require('./config.php');
mysql_connect($db_host, $db_user, $db_userpass);
mysql_select_db($db_name);
$admnick = $_POST['admnick'];
$admpwd = $_POST['admpwd'];
$admmail = $_POST['admmail'];



mysql_query("INSERT INTO x_users(username, password, email, iadm) VALUES($admnick, $admpwd, $admmail, 1)") or die(mysql_error());

print <<<EOF

          <html>
<head>
<title>Welcome to the X-Gallery installation program!</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<body>
<div align="center">
  <p><font color="#000000" face="Verdana, Arial, Helvetica, sans-serif">Welcome 
    to the X-Gallery Installation Program!!</font></p>
  <p>&nbsp;</p>
  <p><font color="#FF0000" face="Verdana, Arial, Helvetica, sans-serif">The Administration 
    account has been SET!</font></p>
  <p>&nbsp;</p>
  <p><font color="#000000" size="2" face="Verdana, Arial, Helvetica, sans-serif">thank 
    you for choosing X-Gallery!</font></p>
  <p><font size="2" face="Verdana, Arial, Helvetica, sans-serif"></font></p>
  <p>&nbsp;</p>
  
  <p><font size="2" face="Verdana, Arial, Helvetica, sans-serif"></font></p>
</div>
</body>
</html>

EOF;



}



 
?>
the error i getting is:

Code: Select all

Unknown column 'lostmylove' in 'field list'

Posted: Mon Sep 27, 2004 12:35 pm
by feyd
I'm guessing this is from line 201? strings need to be inside quotes in order for mysql to be able to read them. If you echo out that query string, I'd bet it doesn't have quotes. (also, might want to think about sanitizing the posted information to guard against sql injection :)

Posted: Mon Sep 27, 2004 12:38 pm
by anjanesh
MySQL in Linux is case sensitive but in Windows, its not.