PHP Insert to MYSql after checking existed value -
i trying register users in app , tried check if age existed stop registration process, wrote code register users , worked when tried validate registration using check_age function doesn't work , still allow registration if age existed can tell me missed code : here code:
<?php if($_server["request_method"]=="post") { require "init.php"; creat_student(); } function creat_student() { global $con; $firstname=$_post["firstname"]; $lastname=$_post["lastname"]; $age=$_post["age"]; if(strcmp(check_age(), '0') == 0) { $query="insert student(firstname,lastname,age) values ('$firstname','$lastname','$age');"; mysqli_query($con,$query); mysqli_close($con); } else echo "not true"; } function check_age() { global $con; $age=$_post["age"]; echo " $age"; $temp_arr=array(); $query="select * student age ='{$age}'; "; $result=mysqli_query($con,$query); $num_of_rows=mysqli_num_rows($result); if($num_of_rows==0) return '0'; else return '1'; }
well mention comments above, there sanitizing needed.
but here suggest..
change
check_age()
function , pass parameter of age in below , return$num_of_rows
.function check_age($age) { global $con; $query="select * student age =".$age; $result=mysqli_query($con,$query); return mysqli_num_rows($result); }
then in
creat_student()
functionif
condition change like...function creat_student() { global $con; $firstname=$_post["firstname"]; $lastname=$_post["lastname"]; $age=$_post["age"]; if(!check_age($age)) { $query="insert student(firstname,lastname,age) values ('$firstname','$lastname','$age');"; mysqli_query($con,$query); mysqli_close($con); } else echo "not true"; }
thanks, jay.
Comments
Post a Comment