On 26-Jul-2001 Matthew DeChant wrote:
> Specifically,
> 
> If I have 3 HTTP_POST_VARS:
> 
> HTTP_POST_VARS["client"] = test1
> HTTP_POST_VARS["directory"]= test2
> HTTP_POST_VARS["password"] =
> 
> 
> and I don't know the names of the vars ahead of time, how would I run a
> check to see if they exist and then get the specific POST_VARS's value. This
> is what I've got so far:
> 
> 
> $squery = "select * from $db where ";
> $qh = fw_query("select * from $db");
>         $fields = odbc_num_fields($qh);
>         for ($i=1;$i<=$fields;$i++) {
>                 # assign $fname the possible field names in the database
> (client,directory,password)
>               $fname[$i] = odbc_field_name($qh,$i);
>                 # assign $postfld the variable name, ie.
$HTTP_POST_VARS["client"]
>               $postfld = $HTTP_POST_VARS["($fname[$i])"];
>                 # check that it exists and is not blank
>             if (isset($postfld) AND ($postfld != "")) {
>                       $value[$i] = $postfld;
>                       $squery.= "$fname[$i] like $value[$i] AND ";
>                 }
>         }
>         # pop last AND
>         $squery= substr($squery, 0,-5);
> 
> so how do you make this work:  $postfld = $HTTP_POST_VARS["($fname[$i])"];
> 
> thanks,
> 

while (list ($fld, $val) = each($HTTP_POST_VARS)) {
 .. do what ever ...

}

Note: It's a insecure practice to build a data query like this.
      You might want to do some kind of validation.

Regards,
-- 
Don Read                                       [EMAIL PROTECTED]
-- It's always darkest before the dawn. So if you are going to 
   steal the neighbor's newspaper, that's the time to do it.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to