Im new to this but...

I have:
Apache 2.0.59
MySQL 5.0.41
PHP 4.4.7 & 5.2.5

and this is my program:

session_start();
include("includes/functions_main.php");
include("Vars.php");
?>


$page = '$_GET[page]';
$cxn = mysqli_connect($host, $user,$passwd, $database) or die
("Can't Connect.");
$sql = "SELECT * FROM page WHERE id=$page";
$result = mysqli_query($cxn, $sql);
$row = mysqli_fetch_assoc($result);
extract ($row);
?>

Re: Im new to this but...

You did everything perfectly in the email except for show what the
error message was.

i am assuming your issue is with the line

$page = '$_GET[page]';

that should just be

$page = $_GET['page'];

The way you are doing it (inside single quotes) does not evaluate the
array as a variable, rather PHP thinks the entire thing is just a
string.

when you you do the query

$sql = "SELECT * FROM page WHERE id=$page";

Your query is actually

"SELECT * FROM page WHERE id=$_GET[page]";

Now changing that one line may fix the issue at hand but I will also
suggest that you read articles, blog entries, etc about SQL Injection
and how to cleanse your data before throwing a user submitted value at
your database.

Thanks,
Joseph Crawford

On Sep 2, 2008, at 3:05 PM, Chris Hale wrote:

> I have:
> Apache 2.0.59
> MySQL 5.0.41
> PHP 4.4.7 & 5.2.5
>
> and this is my program:
>
> > session_start();
> include("includes/functions_main.php");
> include("Vars.php");
> ?>
>
> > $page = '$_GET[page]';
> $cxn = mysqli_connect($host, $user,$passwd, $database) or die
> ("Can't Connect.");
> $sql = "SELECT * FROM page WHERE id=$page";
> $result = mysqli_query($cxn, $sql);
> $row = mysqli_fetch_assoc($result);
> extract ($row);
> ?>
>

Re: Im new to this but...

In the HTML, you either need to use or, if you
have short tags on, , not .

Thank you,
Micah Gersten
onShore Networks
Internal Developer
http://www.onshore.com



Chris Hale wrote:
> I have:
> Apache 2.0.59
> MySQL 5.0.41
> PHP 4.4.7 & 5.2.5
>
> and this is my program:
>
> > session_start();
> include("includes/functions_main.php");
> include("Vars.php");
> ?>
>
> > $page = '$_GET[page]';
> $cxn = mysqli_connect($host, $user,$passwd, $database) or die
> ("Can't Connect.");
> $sql = "SELECT * FROM page WHERE id=$page";
> $result = mysqli_query($cxn, $sql);
> $row = mysqli_fetch_assoc($result);
> extract ($row);
> ?>
>