Reply to thread

Message

<blockquote data-quote="0775097172" data-source="post: 13001041" data-attributes="member: 267213">&lt;?php//product_classs.php file ekaclass product{&nbsp; &nbsp; var $table_name&nbsp;&nbsp; = &quot;products&quot;;&nbsp; &nbsp; var $rows;public&nbsp; $ProductCategoryID , $manufacturer , $ProductLocation , $ProductName , $ProductPrice , $ProductWeight , $ProductStatus , $ProductStock , $ProductCartDesc , $Product_image , $ProductThumb , $ProductShortDesc , $ProductLongDesc ;public $pressSumbitButton , $productImage;public $cur_auto_id;public $updateProductID;//*******************************************************************//&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; Anti MySQL injection Method//*******************************************************************&nbsp; &nbsp; function cleanVer($formVar) {&nbsp; &nbsp; if(!get_magic_quotes_gpc()){&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $formVar = mysql_real_escape_string($formVar);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $formVar = htmlspecialchars($formVar, ENT_IGNORE, 'utf-8');&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $formVar = strip_tags($formVar);//remove html internal tags&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $formVar = stripslashes($formVar);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; $formVar = trim($formVar);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; return $formVar;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; }&nbsp; &nbsp; }//*****************************************************************//&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Update Product Method//******************************************************************function updateFormToDB($id){&nbsp; &nbsp; $pid = $id;&nbsp; &nbsp; if(isset($this-&gt;pressSumbitButton)){&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; $manufacturer = $this-&gt;manufacturer ; &nbsp; $ProductLocation = $this-&gt;ProductLocation ;&nbsp;&nbsp; $ProductName = $this-&gt;ProductName ;&nbsp;&nbsp; $ProductPrice = $this-&gt;ProductPrice ;&nbsp; &nbsp; $ProductWeight = $this-&gt;ProductWeight ;&nbsp; &nbsp; $ProductStatus = $this-&gt;ProductStatus ;&nbsp; &nbsp;&nbsp; $ProductStock = $this-&gt;ProductStock ;&nbsp; &nbsp; &nbsp; $ProductCartDesc = $this-&gt;ProductCartDesc ;&nbsp; &nbsp; &nbsp; $cur_auto_id = $this-&gt;cur_auto_id ;&nbsp; &nbsp;&nbsp; $ProductShortDesc = $this-&gt;ProductShortDesc;&nbsp; &nbsp; &nbsp; $ProductLongDesc = $this-&gt;ProductLongDesc;&nbsp; &nbsp;&nbsp; mysql_query(&quot;BEGIN&quot;); &nbsp; &nbsp;&nbsp; $sql = (&quot;UPDATE Products SET manufacturer = '$manufacturer',ProductLocation = '$ProductLocation',ProductName = '$ProductName' ,ProductPrice = '$ProductPrice' ,ProductWeight = '$ProductWeight' ,ProductStatus = '$ProductStatus' ,ProductStock =&nbsp; '$ProductStock',ProductCartDesc ='$ProductCartDesc' , ProductShortDesc = '$ProductShortDesc' ,ProductLongDesc = '$ProductLongDesc' WHERE ProductID = '$pid'&quot;);&nbsp; &nbsp; &nbsp; &nbsp; mysql_query($sql) or die(trigger_error(&quot;&lt;br&gt;&lt;storng&gt;&lt;u&gt;MySQL Error:&lt;/u&gt;&lt;/strong&gt;&lt;br&gt;&quot;.mysql_error().&quot;&lt;br&gt;&lt;br&gt;&lt;storng&gt;&lt;u&gt;Query Used:&lt;/u&gt;&lt;/strong&gt;&lt;br&gt;&quot;.$sql.&quot;&lt;br&gt;&lt;br&gt;&lt;storng&gt;&lt;u&gt;Info:&lt;/u&gt;&lt;/strong&gt;&lt;br&gt;&quot;,E_USER_ERROR));&nbsp; &nbsp; if(mysql_affected_rows()){ echo &quot;update sucessfuly&quot;; }mysql_query(&quot;COMMIT&quot;);&nbsp; &nbsp; }}}?&gt;&lt;?//mehema class ekak heduwa mama form ekak haraha mage data me function eken update karanna heduwama eka update karanna be kiyanawaphala form eka ethi.HELP ekak oneeeeee?&gt;&lt;div&gt;&lt;? //edit.php kiyala ekakaif(!isset($_POST['update'])){foreach($updateProduct as $u){?&gt;&lt;form action=&quot;edit.php&quot; method=&quot;post&quot; enctype=&quot;multipart/form-data&quot;&nbsp; name=&quot;addProduct&quot;&gt;&nbsp; &nbsp; &lt;table width=&quot;595&quot; border=&quot;1&quot; cellspacing=&quot;1px&quot; cellpadding=&quot;2px&quot;&gt;&lt;tr&gt;&lt;th colspan=&quot;2&quot; bgcolor=&quot;#4180BE&quot;&gt;&lt;font color=&quot;#FFFFFF&quot;&gt;Update Product Details Panal&lt;/font&gt;&lt;/th&gt;&lt;/tr&gt;&lt;tr&gt;&nbsp; &nbsp; &lt;td width=&quot;238&quot;&gt;Product Category Id&lt;/td&gt;&nbsp; &nbsp; &lt;td width=&quot;340&quot;&gt;&lt;input name=&quot;ProductCategoryID&quot; type=&quot;text&quot; value=&quot; &lt;? echo $u['ProductID']; ?&gt;&quot; /&gt;&lt;/td&gt;&nbsp; &lt;/tr&gt;&nbsp; &lt;tr&gt;&nbsp; &nbsp; &lt;td width=&quot;238&quot;&gt;ProductName&lt;/td&gt;&nbsp; &nbsp; &lt;td width=&quot;340&quot;&gt;&lt;input type=&quot;text&quot; name=&quot;ProductName&quot; value=&quot;&lt;? echo $u['ProductName'] ?&gt;&quot; /&gt;&lt;/td&gt;&nbsp; &lt;/tr&gt;&nbsp; &lt;tr&gt;&nbsp; &nbsp; &lt;td&gt;ProductPrice&lt;/td&gt;&nbsp; &nbsp; &lt;td&gt;&lt;input type=&quot;text&quot; name=&quot;ProductPrice&quot;&nbsp; value=&quot;&lt;? echo $u['ProductPrice']?&gt;&quot;/&gt;&lt;/td&gt;&nbsp; &lt;/tr&gt;&nbsp; &lt;tr&gt;&nbsp; &nbsp; &lt;td&gt;ProductWeight&lt;/td&gt;&nbsp; &nbsp; &lt;td&gt;&lt;input type=&quot;text&quot; name=&quot;ProductWeight&quot; value=&quot;&lt;? echo $u['ProductWeight']?&gt;&quot; /&gt;&lt;/td&gt;&nbsp; &lt;/tr&gt;&nbsp; &nbsp; &lt;tr&gt;&nbsp; &nbsp; &lt;td&gt;ProductStatus&lt;/td&gt;&nbsp; &nbsp; &lt;td&gt;&lt;input type=&quot;text&quot; name=&quot;ProductStatus&quot; value=&quot;&lt;? echo $u['ProductStatus']?&gt;&quot; /&gt;&lt;/td&gt;&nbsp; &lt;/tr&gt;&nbsp; &lt;tr&gt;&nbsp; &nbsp; &lt;td&gt;ProductCartDesc&lt;/td&gt;&nbsp; &nbsp; &lt;td&gt;&lt;input type=&quot;text&quot; name=&quot;ProductCartDesc&quot; value=&quot;&lt;? echo $u['ProductCartDesc']?&gt;&quot; /&gt;&lt;/td&gt;&nbsp; &lt;/tr&gt;&nbsp; &lt;tr&gt;&nbsp; &nbsp; &lt;td&gt;ProductShortDesc&lt;/td&gt;&nbsp; &nbsp; &lt;td&gt;&lt;input type=&quot;text&quot; name=&quot;ProductShortDesc&quot; value=&quot;&lt;? echo $u['ProductShortDesc']?&gt;&quot; /&gt;&lt;/td&gt;&nbsp; &lt;/tr&gt;&nbsp; &lt;tr&gt;&nbsp; &nbsp; &lt;td&gt;ProductLongDesc&lt;/td&gt;&nbsp; &nbsp; &lt;td&gt;&lt;input type=&quot;text&quot; name=&quot;ProductLongDesc&quot; value=&quot;&lt;? echo $u['ProductLongDesc']?&gt;&quot; /&gt;&lt;/td&gt;&nbsp; &lt;/tr&gt;&nbsp; &nbsp; &lt;tr&gt;&nbsp; &nbsp; &lt;td&gt;productImage&lt;/td&gt;&nbsp; &nbsp; &lt;td&gt;&lt;input name=&quot;productImage&quot; type=&quot;file&quot; value=&quot;&lt;? $u['ProductImages']?&gt;&quot; /&gt;&lt;/td&gt;&nbsp; &lt;/tr&gt;&nbsp; &lt;tr&gt;&nbsp; &nbsp; &lt;td&gt;Product Stock&lt;/td&gt;&nbsp; &nbsp; &lt;td&gt;&lt;select name=&quot;ProductStock&quot; &gt;&nbsp; &nbsp; &nbsp; &lt;option value=&quot;&lt;? echo $u['ProductStock']?&gt;&quot; selected=&quot;selected&quot;&gt;&lt;?php echo $u['ProductStock']?&gt;&lt;/option&gt;&nbsp; &nbsp; &nbsp; &lt;option value=&quot;inStock&quot;&gt;inStock&lt;/option&gt;&nbsp; &nbsp; &nbsp; &lt;option value=&quot;outStock&quot;&gt;out of stock&lt;/option&gt;&nbsp; &nbsp; &nbsp; &lt;option value=&quot;unlimited&quot;&gt;unlimited&lt;/option&gt;&nbsp; &nbsp; &lt;/select&gt;&lt;/td&gt;&nbsp; &lt;/tr&gt;&nbsp; &lt;tr&gt;&nbsp; &nbsp; &lt;td&gt;ProductLocation&lt;/td&gt;&nbsp; &nbsp; &lt;td&gt;&lt;input type=&quot;text&quot; name=&quot;ProductLocation&quot; value=&quot;&lt;? echo $u['ProductLocation']?&gt;&quot; /&gt;&lt;/td&gt;&nbsp; &lt;/tr&gt;&nbsp; &lt;tr&gt;&nbsp; &nbsp; &lt;td&gt;manufacturer&lt;/td&gt;&nbsp; &nbsp; &lt;td&gt;&lt;input type=&quot;text&quot; name=&quot;manufacturer&quot; value=&quot;&lt;? echo $u['manufacturer']?&gt;&quot; /&gt;&lt;/td&gt;&nbsp; &lt;/tr&gt;&nbsp; &nbsp; &lt;tr&nbsp; &gt;&lt;td colspan=&quot;2&quot;&nbsp; align=&quot;center&quot;&gt;&nbsp;&lt;input type=&quot;hidden&quot;&nbsp; name=&quot;pid&quot; value=&quot;&lt;?php $u['ProductID'] ?&gt;&quot;/&gt;&nbsp; &lt;input name=&quot;update&quot; type=&quot;submit&quot; value=&quot;Update Product Details&quot; /&gt;&lt;/td&gt;&nbsp; &lt;/tr&gt;&lt;/table&gt;&lt;/form&gt;&lt;? }}else{ $product-&gt;manufacturer =&nbsp; $product-&gt;cleanVer($_POST['manufacturer']);$product-&gt;ProductLocation = $product-&gt;cleanVer($_POST['ProductLocation']);$product-&gt;ProductName =&nbsp; $product-&gt;cleanVer($_POST['ProductName']);$product-&gt;ProductPrice =&nbsp; $product-&gt;cleanVer($_POST['ProductPrice']);$product-&gt;ProductWeight =&nbsp; $product-&gt;cleanVer($_POST['ProductWeight']);$product-&gt;ProductStatus =&nbsp; $product-&gt;cleanVer($_POST['ProductStatus']);$product-&gt;ProductStock =&nbsp; $product-&gt;cleanVer($_POST['ProductStock']);$product-&gt;ProductCartDesc =&nbsp; $product-&gt;cleanVer($_POST['ProductCartDesc']);$product-&gt;pressSumbitButton =&nbsp; $product-&gt;cleanVer($_POST['update']);$product-&gt;productImage = $_FILES['productImage'];$product-&gt;ProductShortDesc =&nbsp; $product-&gt;cleanVer($_POST['ProductShortDesc']);$product-&gt;ProductLongDesc =&nbsp; $product-&gt;cleanVer($_POST['ProductLongDesc']);&nbsp; &nbsp; &nbsp; &nbsp; $updated = $product-&gt;updateFormToDB($_POST['pid']);&nbsp; &nbsp; if($updated){ echo &quot;update was successfully&quot;;}else{ echo &quot;counld not update,try again later&quot;;}&nbsp; &nbsp; &nbsp; &nbsp; $product-&gt;addProductImages();} ?&gt;&lt;/div&gt;</blockquote>

[QUOTE="0775097172, post: 13001041, member: 267213"] <?php //product_classs.php file eka class product{ var $table_name = "products"; var $rows; public $ProductCategoryID , $manufacturer , $ProductLocation , $ProductName , $ProductPrice , $ProductWeight , $ProductStatus , $ProductStock , $ProductCartDesc , $Product_image , $ProductThumb , $ProductShortDesc , $ProductLongDesc ; public $pressSumbitButton , $productImage; public $cur_auto_id; public $updateProductID; //******************************************************************* // Anti MySQL injection Method //******************************************************************* function cleanVer($formVar) { if(!get_magic_quotes_gpc()){ $formVar = mysql_real_escape_string($formVar); $formVar = htmlspecialchars($formVar, ENT_IGNORE, 'utf-8'); $formVar = strip_tags($formVar);//remove html internal tags $formVar = stripslashes($formVar); $formVar = trim($formVar); return $formVar; } } //***************************************************************** // Update Product Method //****************************************************************** function updateFormToDB($id){ $pid = $id; if(isset($this->pressSumbitButton)){ $manufacturer = $this->manufacturer ; $ProductLocation = $this->ProductLocation ; $ProductName = $this->ProductName ; $ProductPrice = $this->ProductPrice ; $ProductWeight = $this->ProductWeight ; $ProductStatus = $this->ProductStatus ; $ProductStock = $this->ProductStock ; $ProductCartDesc = $this->ProductCartDesc ; $cur_auto_id = $this->cur_auto_id ; $ProductShortDesc = $this->ProductShortDesc; $ProductLongDesc = $this->ProductLongDesc; mysql_query("BEGIN"); $sql = ("UPDATE Products SET manufacturer = '$manufacturer',ProductLocation = '$ProductLocation',ProductName = '$ProductName' ,ProductPrice = '$ProductPrice' ,ProductWeight = '$ProductWeight' ,ProductStatus = '$ProductStatus' ,ProductStock = '$ProductStock',ProductCartDesc ='$ProductCartDesc' , ProductShortDesc = '$ProductShortDesc' ,ProductLongDesc = '$ProductLongDesc' WHERE ProductID = '$pid'"); mysql_query($sql) or die(trigger_error(" <storng>MySQL Error: ".mysql_error()." <storng>Query Used: ".$sql." <storng>Info: ",E_USER_ERROR)); if(mysql_affected_rows()){ echo "update sucessfuly"; } mysql_query("COMMIT"); } } } ?> <?//mehema class ekak heduwa mama form ekak haraha mage data me function eken update karanna heduwama eka update karanna be kiyanawa phala form eka ethi.HELP ekak oneeeeee?> <div> <? //edit.php kiyala ekaka if(!isset($_POST['update'])){ foreach($updateProduct as $u){?> <form action="edit.php" method="post" enctype="multipart/form-data" name="addProduct"> <table width="595" border="1" cellspacing="1px" cellpadding="2px"> <tr> <th colspan="2" bgcolor="#4180BE">Update Product Details Panal</th> </tr> <tr> <td width="238">Product Category Id</td> <td width="340"><input name="ProductCategoryID" type="text" value=" <? echo $u['ProductID']; ?>" /></td> </tr> <tr> <td width="238">ProductName</td> <td width="340"><input type="text" name="ProductName" value="<? echo $u['ProductName'] ?>" /></td> </tr> <tr> <td>ProductPrice</td> <td><input type="text" name="ProductPrice" value="<? echo $u['ProductPrice']?>"/></td> </tr> <tr> <td>ProductWeight</td> <td><input type="text" name="ProductWeight" value="<? echo $u['ProductWeight']?>" /></td> </tr> <tr> <td>ProductStatus</td> <td><input type="text" name="ProductStatus" value="<? echo $u['ProductStatus']?>" /></td> </tr> <tr> <td>ProductCartDesc</td> <td><input type="text" name="ProductCartDesc" value="<? echo $u['ProductCartDesc']?>" /></td> </tr> <tr> <td>ProductShortDesc</td> <td><input type="text" name="ProductShortDesc" value="<? echo $u['ProductShortDesc']?>" /></td> </tr> <tr> <td>ProductLongDesc</td> <td><input type="text" name="ProductLongDesc" value="<? echo $u['ProductLongDesc']?>" /></td> </tr> <tr> <td>productImage</td> <td><input name="productImage" type="file" value="<? $u['ProductImages']?>" /></td> </tr> <tr> <td>Product Stock</td> <td><select name="ProductStock" > <option value="<? echo $u['ProductStock']?>" selected="selected"><?php echo $u['ProductStock']?></option> <option value="inStock">inStock</option> <option value="outStock">out of stock</option> <option value="unlimited">unlimited</option> </select></td> </tr> <tr> <td>ProductLocation</td> <td><input type="text" name="ProductLocation" value="<? echo $u['ProductLocation']?>" /></td> </tr> <tr> <td>manufacturer</td> <td><input type="text" name="manufacturer" value="<? echo $u['manufacturer']?>" /></td> </tr> <tr ><td colspan="2" align="center"> <input type="hidden" name="pid" value="<?php $u['ProductID'] ?>"/> <input name="update" type="submit" value="Update Product Details" /></td> </tr> </table> </form> <? }}else{ $product->manufacturer = $product->cleanVer($_POST['manufacturer']); $product->ProductLocation = $product->cleanVer($_POST['ProductLocation']); $product->ProductName = $product->cleanVer($_POST['ProductName']); $product->ProductPrice = $product->cleanVer($_POST['ProductPrice']); $product->ProductWeight = $product->cleanVer($_POST['ProductWeight']); $product->ProductStatus = $product->cleanVer($_POST['ProductStatus']); $product->ProductStock = $product->cleanVer($_POST['ProductStock']); $product->ProductCartDesc = $product->cleanVer($_POST['ProductCartDesc']); $product->pressSumbitButton = $product->cleanVer($_POST['update']); $product->productImage = $_FILES['productImage']; $product->ProductShortDesc = $product->cleanVer($_POST['ProductShortDesc']); $product->ProductLongDesc = $product->cleanVer($_POST['ProductLongDesc']); $updated = $product->updateFormToDB($_POST['pid']); if($updated){ echo "update was successfully";}else{ echo "counld not update,try again later";} $product->addProductImages();} ?> </div> [/QUOTE]

Verification

Payakata winadi keeyak tibeda?

Search

Latest ads

Reply to thread