php - Data is not fetched from MySQL database -


i trying fetch data data base, it's not giving me output. it's displaying "all charges". code below:

<?php         include 'precode.php';         include 'header.php';          echo '<body><div class="standardlayout">';         include 'systemmenu.php';         echo '<h4>all charges</h4>';            $user = unserialize($_session['user']);           echo $query = "select * billingitems userid=' " . $user-> userid .  " ' order deliverytimestamp desc";            $result = mysqli_query($db, $query);          while ($row = mysqli_fetch_array($result)) {          echo  $row['type'] . '<br>' .                  'cost: $' . $row['amount'] . '<br>' .                  ' finalized: ' . $row['deliverytimestamp']  ;  }         echo '</div></body></html>';          $_session['user'] = serialize($user);         include 'footer.html'; ?>

here output echo $query;:

all charges object(user)#2 (11) { ["orders"]=> null ["fname"]=> string(6) "kimmie" ["lname"]=> string(4) "kaur" ["address"]=> string(10) "6768bbnmmn" ["phone"]=> string(11) "66767798898" ["email"]=> string(6) "kimmie" ["userid"]=> string(3) "108" ["password"]=> string(4) "kaur" ["passwordx"]=> null ["amountowed"]=> string(1) "0" ["zip"]=> string(6) "768798" } select * billingitems userid=' 108 ' order deliverytimestamp desc

seems me query building problem, because this

$query = "select * billingitems userid=' " . $user-> userid .  " ' order deliverytimestamp desc";

will give if id "bob".

select * billingitems userid=' bob ' order deliverytimestamp desc

you embedding spaces around id, doesn't match contents of column.

the safer way use prepared statements , bind parameters don't run these kinds of bugs. keep safe sql injection. see question details: how can prevent sql-injection in php?


Comments

Post a Comment

Popular posts from this blog

toolbar - How to add link to user registration inside toobar in admin joomla 3 custom component -

im trying write component admin side , need add user creation. dont want duplicate existing codes add link. know how add task not simple link toolbar. thx help. if wanting button opens new user screen can try in component: $bar = jtoolbar::getinstance('toolbar'); $bar->appendbutton('link', 'users', 'new user','index.php?option=com_users&task=user.add'); you need add view.html.php file wherever you're creating toolbar. is need?
Read more

linux - disk space limitation when creating war file -

i have 1 gb disk space limitation hosting app , have used 700mb of it. however want create war file directory big (around 600mb) using command : jar -cvf root.war folderpath that's why encounter quota limitation , can't following. i'm looking way delete folder content when it's applying archive conserve disk space take note can't install zip tool in ssh shell ~ the code works on test directories, test first anyway, deletes files. it's not efficient. assumptions: 300mb free space, in destructively compress 600mb folderpath directory. none of files big -- if file in folderpath 300mb or larger, fail. notes: if ' $out ' file exists, nothing. first find pipes file list while , if ' $out ' doesn't exist in loop, create it, don't update -- if does exist, update it. each pass adds 1 more file, deletes unless file directory. after loop finishes delete empty directories too. unset u ; in=folderpath ; out=roo...
Read more