[PHP-DB] Re: MySQL Query on the Fly
You have to use an iframe to do what you want. Once the user select something, you referesh the iframe and you pass specific parameters to it based on the user's choice. -- itoctopus - http://www.itoctopus.com ""Todd A. Dorschner"" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] Good Morning, I've been searching and toying with this solution for some time but can't find that right answer. Looking for solutions/suggestions to the following: I created a program that will allow people to track sales and depending on what they've sold, they will either get a set bonus, or a bonus based on a percentage. I have no problem creating a drop down box for them to select from, and I could probably create a select button that would do the action, but I'd rather have it in one step. So what I'm trying to do is somehow when they select from the drop down (via a JavaScript onchange or something) I'd like it to pull data from the MySQL database. I'd like it to pull the amount and then each or per based on the ID of what they've selected from the drop down. If it was always based on each sale or based on a percentage, that would be easy as I could code that into the drop box, but I'd like to keep it based on the ID so that it can pull out of the database the name, and then when changed pull the info. Any ideas? Thanks in advance for the help. If you have any questions or it seems like I left something out, please let me know. Thank you for your time, Todd Dorschner -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP-DB] PHP to md5 the $var before it reaches MySQL's gen query log
Once again sorry to all for indulging you. I have found the answer, plus a
little additional security on the this.
Here is the code that works with additional encrypting of the md5 from PHP.
My syntax was incorrect before.
Bedul got me thinking by changing the BLOB to VARCHAR. That led to the
answer.
Blessings,
Chetan
function addNewUser($username,$password){
global $q;
global $tbl_name;
global $con;
$usrname=md5($username);
$passname=md5($password);
//hash then encrypt a string
function Encrypt($string) {$crypted = crypt(md5($string),
md5($string));return $crypted; }
$user = encrypt($usrname);
$pass = encrypt($passname);
mysql_query("INSERT INTO $tbl_name
(username,password)VALUES('$user','$pass')");
return mysql_query($q,$con);
;;
;;
Chetanji wrote:
>
> Hey Bedul,
> My mistake as md5 on MySQL side still works. I put an extra ' in the
> passwords value by mistake. I corrected it.
> Still no error from MySQL I can not tell the difference from either INSERT
> in the log as both look the same(except one is binary 32bits and the
> other md5('text').
>
> Still haven't figured this silly problem out.
> Thanks for your quick help though.
> Chetan
>
>
> Chetanji wrote:
>>
>> Hey Bedul,
>> I dropped the table and recreated it with VARCHAR (50) for both. (The
>> reason I like BLOB is when you edit the table all you see is BLOB until
>> you have the permission to open it to binary or text.
>>
>> Here is the log message:
>>
>> 070512 16:36:07 35 Connect [EMAIL PROTECTED] on
>> 35 Init DB aims site
>> 35 Query INSERT INTO docproedit
>> (username,password)VALUES
>>
>> ('61d46e51e01c5c77ffb9a60f00a842a1'),('2ccd89b67324dd915dd2d286f613332e')
>> 35 Query INSERT INTO docproedit
>> (username,password)VALUES(md5('mata's'),md5('blessing'))
>> 35 Query 1
>> 35 Quit
>>
>> Now neither INSERT works. Do you know what the '1' is by the way?
>> With BLOB at least one worked with inserting $var's in the values.
>> This seems like a silly problem.
>> There must be some way to do this proper. I'm just a baby at this.
>> Blessings,
>> Chetan
>>
>>
>>
>>
>> Bedul says:
>>
>>
>> bedul wrote:
>>>
>>> username BLOB NOT NULL default '',
>>> password BLOB NOT NULL default '',
>>>
>>> do you try
>>> username varchar 50,
>>> password varchar 50??
>>>
>>> i'm just ask..
>>> sry, hope that's can solve your problem
>>>
>>> - Original Message -
>>> From: "Chetan Graham" <[EMAIL PROTECTED]>
>>> To:
>>> Sent: Saturday, May 12, 2007 4:28 PM
>>> Subject: [PHP-DB] PHP to md5 the $var before it reaches MySQL's gen
>>> query
>>> log
>>>
>>>
Greetings to All,
I am having difficulty in 'md5'ing a $var in a function before it is
placed into the ("INSERT INTO table...
The whole point is I don't want the MySQL DB logs showing my $var's
password and username 'before' it is encrypted by MySQL's md5.
When MySQL receives PHP's encrypted $var the log shows query INSERT
with
the 32 bits but it is not inserted into the DB.
MySQL will not accept the $var's in the code that is commented out.
It shows no errors by the way.
MySQL accepts what is shown, but this is not as I explained what I
want.
Thanks In Advance,
Chetan
mysql_query("CREATE TABLE IF NOT EXISTS docproedit (
id int(11) NOT NULL auto_increment,
username BLOB NOT NULL default '',
password BLOB NOT NULL default '',
TimeEnter timestamp,
PRIMARY KEY (id)
)
ENGINE=MyISAM;")or die('Create Died' . mysql_error());
>>> $db_server='localhost';
$db_user='root';
$db_pass='somepassword';
$db_name='aims site';
$tbl_name='docproedit';
$con = mysql_connect($db_server,$db_user,$db_pass) or
die(mysql_error());
$q=mysql_select_db($db_name, $con) or die(mysql_error());
function addNewUser($username,$password){
global $q;
global $tbl_name;
global $con;
//$user=md5($username);
//$pass=md5($password);
//mysql_query("INSERT INTO $tbl_name
(username,password)VALUES('$user'),('$pass')");
$user=$username;
$pass=$password;
mysql_query("INSERT INTO $tbl_name
(username,password)VALUES(md5('$user'),md5('$pass'))");
return mysql_query($q,$con);
}
?>
>>> $username="somename";
$password="somepassword";
addNewUser($username,$password);
echo "New User Added!";
?>
--
PHP Database Mailing List (http://www.php.net/)
>>>
Re: [PHP-DB] PHP to md5 the $var before it reaches MySQL's gen query log
Hey Bedul,
My mistake as md5 on MySQL side still works. I put an extra ' in the
passwords value by mistake. I corrected it.
Still no error from MySQL I can not tell the difference from either INSERT
in the log as both look the same(except one is binary 32bits and the other
md5('text').
Still haven't figured this silly problem out.
Thanks for your quick help though.
Chetan
Chetanji wrote:
>
> Hey Bedul,
> I dropped the table and recreated it with VARCHAR (50) for both. (The
> reason I like BLOB is when you edit the table all you see is BLOB until
> you have the permission to open it to binary or text.
>
> Here is the log message:
>
> 070512 16:36:0735 Connect [EMAIL PROTECTED] on
>35 Init DB aims site
>35 Query INSERT INTO docproedit
> (username,password)VALUES
>
> ('61d46e51e01c5c77ffb9a60f00a842a1'),('2ccd89b67324dd915dd2d286f613332e')
>35 Query INSERT INTO docproedit
> (username,password)VALUES(md5('mata's'),md5('blessing'))
>35 Query 1
>35 Quit
>
> Now neither INSERT works. Do you know what the '1' is by the way?
> With BLOB at least one worked with inserting $var's in the values.
> This seems like a silly problem.
> There must be some way to do this proper. I'm just a baby at this.
> Blessings,
> Chetan
>
>
>
>
> Bedul says:
>
>
> bedul wrote:
>>
>> username BLOB NOT NULL default '',
>> password BLOB NOT NULL default '',
>>
>> do you try
>> username varchar 50,
>> password varchar 50??
>>
>> i'm just ask..
>> sry, hope that's can solve your problem
>>
>> - Original Message -
>> From: "Chetan Graham" <[EMAIL PROTECTED]>
>> To:
>> Sent: Saturday, May 12, 2007 4:28 PM
>> Subject: [PHP-DB] PHP to md5 the $var before it reaches MySQL's gen query
>> log
>>
>>
>>> Greetings to All,
>>> I am having difficulty in 'md5'ing a $var in a function before it is
>>> placed into the ("INSERT INTO table...
>>>
>>> The whole point is I don't want the MySQL DB logs showing my $var's
>>> password and username 'before' it is encrypted by MySQL's md5.
>>>
>>> When MySQL receives PHP's encrypted $var the log shows query INSERT with
>>> the 32 bits but it is not inserted into the DB.
>>>
>>> MySQL will not accept the $var's in the code that is commented out.
>>> It shows no errors by the way.
>>> MySQL accepts what is shown, but this is not as I explained what I want.
>>> Thanks In Advance,
>>> Chetan
>>>
>>> mysql_query("CREATE TABLE IF NOT EXISTS docproedit (
>>> id int(11) NOT NULL auto_increment,
>>> username BLOB NOT NULL default '',
>>> password BLOB NOT NULL default '',
>>> TimeEnter timestamp,
>>> PRIMARY KEY (id)
>>>)
>>> ENGINE=MyISAM;")or die('Create Died' . mysql_error());
>>>
>>>
>>> >> $db_server='localhost';
>>> $db_user='root';
>>> $db_pass='somepassword';
>>> $db_name='aims site';
>>> $tbl_name='docproedit';
>>> $con = mysql_connect($db_server,$db_user,$db_pass) or
>>> die(mysql_error());
>>> $q=mysql_select_db($db_name, $con) or die(mysql_error());
>>>
>>> function addNewUser($username,$password){
>>> global $q;
>>> global $tbl_name;
>>> global $con;
>>> //$user=md5($username);
>>> //$pass=md5($password);
>>> //mysql_query("INSERT INTO $tbl_name
>>> (username,password)VALUES('$user'),('$pass')");
>>> $user=$username;
>>> $pass=$password;
>>> mysql_query("INSERT INTO $tbl_name
>>> (username,password)VALUES(md5('$user'),md5('$pass'))");
>>> return mysql_query($q,$con);
>>> }
>>> ?>
>>> >> $username="somename";
>>> $password="somepassword";
>>>
>>> addNewUser($username,$password);
>>> echo "New User Added!";
>>> ?>
>>>
>>> --
>>> PHP Database Mailing List (http://www.php.net/)
>>> To unsubscribe, visit: http://www.php.net/unsub.php
>>>
>>
>> --
>> PHP Database Mailing List (http://www.php.net/)
>> To unsubscribe, visit: http://www.php.net/unsub.php
>>
>>
>>
>
>
--
View this message in context:
http://www.nabble.com/PHP-to-md5-the-%24var-before-it-reaches-MySQL%27s-gen-query-log-tf3731340.html#a10445016
Sent from the Php - Database mailing list archive at Nabble.com.
--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP-DB] PHP to md5 the $var before it reaches MySQL's gen query log
Hey Bedul,
I dropped the table and recreated it with VARCHAR (50) for both. (The reason
I like BLOB is when you edit the table all you see is BLOB until you have
the permission to open it to binary or text.
Here is the log message:
070512 16:36:07 35 Connect [EMAIL PROTECTED] on
35 Init DB aims site
35 Query INSERT INTO docproedit
(username,password)VALUES
('61d46e51e01c5c77ffb9a60f00a842a1'),('2ccd89b67324dd915dd2d286f613332e')
35 Query INSERT INTO docproedit
(username,password)VALUES(md5('mata's'),md5('blessing'))
35 Query 1
35 Quit
Now neither INSERT works. Do you know what the '1' is by the way?
With BLOB at least one worked with inserting $var's in the values.
This seems like a silly problem.
There must be some way to do this proper. I'm just a baby at this.
Blessings,
Chetan
Bedul says:
bedul wrote:
>
> username BLOB NOT NULL default '',
> password BLOB NOT NULL default '',
>
> do you try
> username varchar 50,
> password varchar 50??
>
> i'm just ask..
> sry, hope that's can solve your problem
>
> - Original Message -
> From: "Chetan Graham" <[EMAIL PROTECTED]>
> To:
> Sent: Saturday, May 12, 2007 4:28 PM
> Subject: [PHP-DB] PHP to md5 the $var before it reaches MySQL's gen query
> log
>
>
>> Greetings to All,
>> I am having difficulty in 'md5'ing a $var in a function before it is
>> placed into the ("INSERT INTO table...
>>
>> The whole point is I don't want the MySQL DB logs showing my $var's
>> password and username 'before' it is encrypted by MySQL's md5.
>>
>> When MySQL receives PHP's encrypted $var the log shows query INSERT with
>> the 32 bits but it is not inserted into the DB.
>>
>> MySQL will not accept the $var's in the code that is commented out.
>> It shows no errors by the way.
>> MySQL accepts what is shown, but this is not as I explained what I want.
>> Thanks In Advance,
>> Chetan
>>
>> mysql_query("CREATE TABLE IF NOT EXISTS docproedit (
>> id int(11) NOT NULL auto_increment,
>> username BLOB NOT NULL default '',
>> password BLOB NOT NULL default '',
>> TimeEnter timestamp,
>> PRIMARY KEY (id)
>>)
>> ENGINE=MyISAM;")or die('Create Died' . mysql_error());
>>
>>
>> > $db_server='localhost';
>> $db_user='root';
>> $db_pass='somepassword';
>> $db_name='aims site';
>> $tbl_name='docproedit';
>> $con = mysql_connect($db_server,$db_user,$db_pass) or die(mysql_error());
>> $q=mysql_select_db($db_name, $con) or die(mysql_error());
>>
>> function addNewUser($username,$password){
>> global $q;
>> global $tbl_name;
>> global $con;
>> //$user=md5($username);
>> //$pass=md5($password);
>> //mysql_query("INSERT INTO $tbl_name
>> (username,password)VALUES('$user'),('$pass')");
>> $user=$username;
>> $pass=$password;
>> mysql_query("INSERT INTO $tbl_name
>> (username,password)VALUES(md5('$user'),md5('$pass'))");
>> return mysql_query($q,$con);
>> }
>> ?>
>> > $username="somename";
>> $password="somepassword";
>>
>> addNewUser($username,$password);
>> echo "New User Added!";
>> ?>
>>
>> --
>> PHP Database Mailing List (http://www.php.net/)
>> To unsubscribe, visit: http://www.php.net/unsub.php
>>
>
> --
> PHP Database Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
>
--
View this message in context:
http://www.nabble.com/PHP-to-md5-the-%24var-before-it-reaches-MySQL%27s-gen-query-log-tf3731340.html#a10444916
Sent from the Php - Database mailing list archive at Nabble.com.
--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
Re: [PHP-DB] PHP to md5 the $var before it reaches MySQL's gen query log
username BLOB NOT NULL default '',
password BLOB NOT NULL default '',
do you try
username varchar 50,
password varchar 50??
i'm just ask..
sry, hope that's can solve your problem
- Original Message -
From: "Chetan Graham" <[EMAIL PROTECTED]>
To:
Sent: Saturday, May 12, 2007 4:28 PM
Subject: [PHP-DB] PHP to md5 the $var before it reaches MySQL's gen query
log
> Greetings to All,
> I am having difficulty in 'md5'ing a $var in a function before it is
> placed into the ("INSERT INTO table...
>
> The whole point is I don't want the MySQL DB logs showing my $var's
> password and username 'before' it is encrypted by MySQL's md5.
>
> When MySQL receives PHP's encrypted $var the log shows query INSERT with
> the 32 bits but it is not inserted into the DB.
>
> MySQL will not accept the $var's in the code that is commented out.
> It shows no errors by the way.
> MySQL accepts what is shown, but this is not as I explained what I want.
> Thanks In Advance,
> Chetan
>
> mysql_query("CREATE TABLE IF NOT EXISTS docproedit (
> id int(11) NOT NULL auto_increment,
> username BLOB NOT NULL default '',
> password BLOB NOT NULL default '',
> TimeEnter timestamp,
> PRIMARY KEY (id)
>)
> ENGINE=MyISAM;")or die('Create Died' . mysql_error());
>
>
> $db_server='localhost';
> $db_user='root';
> $db_pass='somepassword';
> $db_name='aims site';
> $tbl_name='docproedit';
> $con = mysql_connect($db_server,$db_user,$db_pass) or die(mysql_error());
> $q=mysql_select_db($db_name, $con) or die(mysql_error());
>
> function addNewUser($username,$password){
> global $q;
> global $tbl_name;
> global $con;
> //$user=md5($username);
> //$pass=md5($password);
> //mysql_query("INSERT INTO $tbl_name
> (username,password)VALUES('$user'),('$pass')");
> $user=$username;
> $pass=$password;
> mysql_query("INSERT INTO $tbl_name
> (username,password)VALUES(md5('$user'),md5('$pass'))");
> return mysql_query($q,$con);
> }
> ?>
> $username="somename";
> $password="somepassword";
>
> addNewUser($username,$password);
> echo "New User Added!";
> ?>
>
> --
> PHP Database Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
[PHP-DB] PHP to md5 the $var before it reaches MySQL's gen query log
Greetings to All,
I am having difficulty in 'md5'ing a $var in a function before it is
placed into the ("INSERT INTO table...
The whole point is I don't want the MySQL DB logs showing my $var's
password and username 'before' it is encrypted by MySQL's md5.
When MySQL receives PHP's encrypted $var the log shows query INSERT with
the 32 bits but it is not inserted into the DB.
MySQL will not accept the $var's in the code that is commented out.
It shows no errors by the way.
MySQL accepts what is shown, but this is not as I explained what I want.
Thanks In Advance,
Chetan
mysql_query("CREATE TABLE IF NOT EXISTS docproedit (
id int(11) NOT NULL auto_increment,
username BLOB NOT NULL default '',
password BLOB NOT NULL default '',
TimeEnter timestamp,
PRIMARY KEY (id)
)
ENGINE=MyISAM;")or die('Create Died' . mysql_error());
New User Added!";
?>
--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
