capturing textbox value into string for update statement

is project_name a VARCHAR if so then you will need quotes around the value

UPDATE projects set project_name='$project_name';

same with the modified field if its a DATETIME type.

Hi,

I collecting the $project_number from the previous page via a
if( isset($_GET["project_number"]) ) {
   $project_number = $_GET["project_number"];

which i use to select that project data and display for editing.

I then want to commit any updates, and I'm using this code

<form name="update_project" action="<?php echo $_SERVER["PHP_SELF"]; ?>" method="post">
<input type="hidden" name="update_project" value="1">
<input type="hidden" name="project_number" value="<?php echo $project["project_number"]; ?>">
<input type="submit" value="Update Project">
</form>

and this....


if( 1 == $_POST["update_project"] ) {

    $project_name = $db->quote($_POST["project_name"]);

    print  "project_name = $project_name <br>";

}

nevermind the commit, at this point my print statement only shows a NULL
when I run this, I expect the project name retrieved to be printed.

this project_name is a  varchar(150),
jkna_gunn thanks for pointing out the string quotes, but they're still comming up NULL.

Any ideas or suggestions.
TIA

i dont see project_name as an input in your form only update_project and project_number also not to confuse yourself maybe you should name the form something else and not the same as an input field.

should not
 $project_name = $_POST["$post_project_name"];
be written as
 $project_name = $_POST["post_project_name"];

??

tknayak,

yes, it should.

eDias,

> I collecting the $project_number from the previous page

You still need to collect it again on this page from your hidden variable.

> <?php echo $project["project_number"]; ?>

is this from an array or a session?

Lastly, mysql_real_escape_string may not work on your php version - you can try mysql_escape_string instead.

try:

<form name="update_project" action="<?php echo $_SERVER["PHP_SELF"]; ?>" method="post">
<input type="hidden" name="update_project" value="1">
<!--// put your project number code in here //-->
<input type="hidden" name="project_number" value="9">
<!--// put your project number code in here //-->
<input tpe="text" name="project_name">
<input type="submit" value="Update Project">
</form>

<?php

$update_project = mysql_escape_string($_POST["update_project"]);
$project_name = mysql_escape_string($_POST["project_name"]);
$project_number = mysql_escape_string($_POST["project_number"]);

if(!empty($project_number) && $update_project == 1 ) {

    $sql = "UPDATE projects SET
              project_name = '$project_name',
              modified_dt = NOW()
            WHERE
              project_number = $project_number";

   print $sql;

}

?>

I think I'm almost there ;-)

if I use this it works fine...
     <input tpe="text" name="project_name">

but I need to pass the value of an object called "project_name"
       <input type="text" size="43" name="project_name"
       value=<?php echo smart_strip_slashes($project["project_name"]); ?>>

if I use this, I get no value assigned
    <input type="hidden" name="_project_name" value="<?php $_POST["project_name"] ?>">

How do i replace the hardcoded string with the current value of this object.

TIA

<?php echo $_POST["project_name"];?>