[PHP] UPDATE and redirect

2007-04-11 Thread marcelo Wolfgang
it ( the phpmyadmin page is where I got the idea of using the '' ). Any clues ? Also, how can I make a redirect after the query has run ? TIA Marcelo Wolfgang -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] UPDATE and redirect

2007-04-11 Thread marcelo Wolfgang
Hi, It's fixed, I think the problem where at the '==' ... I have to remember that in PHP this is like ActionScript. Also, what if $_GET['act'] is neither 'a' or 'd'? Again, what if $_GET['id'] is null? The only way to not be 'a' or 'd' or to be null is if someone mess with url, which shoul

Re: [PHP] UPDATE and redirect

2007-04-11 Thread Marcelo Wolfgang
and what if $_GET['id'] is something like "1; DROP TABLE tb_emails;" ?? SQL injection just waits to happen I think tha tit will be too much of a hacker effort just to kill a table of contact emails, and also he will have to guess ( is there other way ? ) the table name, but just to be on a s

Re: [PHP] UPDATE and redirect

2007-04-11 Thread Marcelo Wolfgang
and what if $_GET['id'] is something like "1; DROP TABLE tb_emails;" ?? SQL injection just waits to happen Something I just thought, he could do a drop table inside an update statement ? because the query is : UPDATE tb_emails SET bol_active = $action WHERE auto_id = $id so if he changed t

[PHP] File uploading and saving info on mysql

2007-05-03 Thread Marcelo Wolfgang
; this is correct; mysql_connect("localhost",$db_user,$db_pass) or die (mysql_error());; mysql_select_db ($db_table); $user_Query = mysql_query("INSERT INTO tb_downloads (var_title, var_filepath, var_filetype, dt_data, bol_active) VALUES ('$title', '$filePath',&#x

Re: [PHP] File uploading and saving info on mysql

2007-05-04 Thread Marcelo Wolfgang
Richard Lynch wrote: Browsers will probably NOT populate these reliably... Mac Safari, might, for example, choose "application/x-pdf" for the PDF file. You really can't rely on 'type' to be useful in any way, shape, or form. Thanks for the tips, I've deleted this check, and changed how I ch

[PHP] Selecting a special row from the database

2007-05-04 Thread Marcelo Wolfgang
to see ( the id=XX one ) from the others rows, can someone advice me ? Here is the code I have so far, I hope it serve as a better explanation than mine! TIA Marcelo Wolfgang -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] Re: Selecting a special row from the database

2007-05-08 Thread Marcelo Wolfgang
Wow, Thanks for all the ideas, I'll explore all of them. I have the content people messing with the adm so it's hard to try things I don't fully understand by now About the sql injection, the db user I set for this has only select privileges, should I be worried even with this ? Thanks aga

[PHP] best technique to get the ID of the last inserted value

2007-07-20 Thread Marcelo Wolfgang
nections I may get the wrong one, so that's the why of my question. TIA Marcelo Wolfgang -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

[PHP] From TXT to a mySQL db

2007-10-18 Thread Marcelo Wolfgang
ere a quick and simple way to convert the row string into a INSERT query ? Should I try some manipulation first with the TXT file ? TIA Marcelo Wolfgang -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] From TXT to a mySQL db

2007-10-18 Thread Marcelo Wolfgang
test.txt' INTO TABLE test FIELDS TERMINATED BY '^' LINES STARTING BY '20'"; $Query = mysql_query($SQL); TIA Marcelo Wolfgang Jason Pruim wrote: On Oct 18, 2007, at 2:29 PM, Marcelo Wolfgang wrote: Hi all, I need some helps/tips to know if a transition from a txt

[PHP] PHP Job in Curitiba, Brasil

2007-11-13 Thread Marcelo Wolfgang
Hi list We here at ZeroCinco Propaganda are looking for a PHP Developer to assist me in our web projects Must have a good knoledge of PHP and mySQL, and integration with ActionScript. Also you need to be confortable using Photoshop. If you are interested send your resume to [EMAIL PROTECTED]