PHP: Difference between revisions

From Network Security Wiki
Content added Content deleted
(Created page with " = Basics = {{UC}} = Code Snipets= *Redirect to another page if query is empty: <pre> $sql = "SELECT * FROM MasterDB WHERE sr=$sr"; $results = mysqli_query($link, $sql); if...")
 
Line 20: Line 20:
exit();
exit();
}
}
</pre>

* DB connection:
<pre>
define('DB_NAME', 'codered');
define('DB_USER', 'test');
define('DB_PASSWORD', 'test@123');
define('DB_HOST', 'localhost');

$link = mysqli_connect(DB_HOST, DB_USER, DB_PASSWORD);

if (!$link) {
die('Could not connect: ' . mysqli_connect_error($link));
}

$db_selected = mysqli_select_db($link, DB_NAME);

if (!$db_selected) {
die('Can\'t use ' . DB_NAME . ': ' . mysqli_error($link));
}

$sr = mysqli_real_escape_string($link, $_POST['sr']);
$redirect = mysqli_real_escape_string($link, $_POST['redirect_to']);
$CustomerName = mysqli_real_escape_string($link, $_POST['CustomerName']);
$Geo = $_POST['Geo'];
$BusinessImpact = mysqli_real_escape_string($link, $_POST['BusinessImpact']);
$ProductVersion = mysqli_real_escape_string($link, $_POST['ProductVersion']);
$ProblemDescription = mysqli_real_escape_string($link, $_POST['ProblemDescription']);
$CustomerTemp = $_POST['CustomerTemp'];
$BugID = mysqli_real_escape_string($link, $_POST['BugID']);
$LastUpdate = mysqli_real_escape_string($link, $_POST['LastUpdate']);
$email = mysqli_real_escape_string($link, $_POST['email']);
$ProductionDown = $_POST['ProductionDown'];
</pre>
</pre>

Revision as of 20:58, 1 September 2017

Basics

        This section is under construction.

Code Snipets

  • Redirect to another page if query is empty:
$sql = "SELECT * FROM MasterDB WHERE sr=$sr";
$results = mysqli_query($link, $sql);

if (!$results) {
        die('Invalid query: ' . mysqli_error($link));
}

if (!$result = mysqli_fetch_array($results )){
        header('Location: index.php', TRUE, 303);
        exit();
} else {
        header('Location: index2.php', TRUE, 303);
        exit();
}
  • DB connection:
define('DB_NAME', 'codered');
define('DB_USER', 'test');
define('DB_PASSWORD', 'test@123');
define('DB_HOST', 'localhost');

$link = mysqli_connect(DB_HOST, DB_USER, DB_PASSWORD);

if (!$link) {
        die('Could not connect: ' . mysqli_connect_error($link));
}

$db_selected = mysqli_select_db($link, DB_NAME);

if (!$db_selected) {
        die('Can\'t use ' . DB_NAME . ': ' . mysqli_error($link));
}

$sr = mysqli_real_escape_string($link, $_POST['sr']);
$redirect = mysqli_real_escape_string($link, $_POST['redirect_to']);
$CustomerName = mysqli_real_escape_string($link, $_POST['CustomerName']);
$Geo = $_POST['Geo'];
$BusinessImpact = mysqli_real_escape_string($link, $_POST['BusinessImpact']);
$ProductVersion = mysqli_real_escape_string($link, $_POST['ProductVersion']);
$ProblemDescription = mysqli_real_escape_string($link, $_POST['ProblemDescription']);
$CustomerTemp = $_POST['CustomerTemp'];
$BugID = mysqli_real_escape_string($link, $_POST['BugID']);
$LastUpdate = mysqli_real_escape_string($link, $_POST['LastUpdate']);
$email = mysqli_real_escape_string($link, $_POST['email']);
$ProductionDown = $_POST['ProductionDown'];