(Mar 8, 2016, 09:47 AM)WildDorito Wrote: PHP (the worst language in my life)

(Mar 8, 2016, 01:30 PM)Cameron Wrote:

(Mar 8, 2016, 09:47 AM)WildDorito Wrote: PHP (the worst language in my life)

I like PHP

:P

<?php
$name = "Noble";
$software = "Notepad";
$sql = mysql_query("SELECT * FROM developers WHERE name = '$name' and software = '$software'");
$sqlcheck = mysql_num_rows($sql);
if ($sqlcheck == "1") {
echo ("Error: 404 :P ");
$life = "0";
} else {
echo ("OK");
$life = "1";
}
?>

(Mar 9, 2016, 11:46 PM)WildDorito Wrote: My brilliant PHP skills:
[spoiler=""]
<?php
$name = "Noble";
$software = "Notepad";
$sql = mysql_query("SELECT * FROM developers WHERE name = '$name' and software = '$software'");
$sqlcheck = mysql_num_rows($sql);
if ($sqlcheck == "1") {
echo ("Error: 404 ");
$life = "0";
} else {
echo ("OK");
$life = "1";
}
?>
[/spoiler]

This should work, made it now, read up on PDO (Stands for PHP Data Objects if I remember correctly) its really good

(Mar 10, 2016, 12:19 AM)goigle Wrote: i know someone who writes code in microsoft word

(Mar 9, 2016, 11:56 PM)A Simple Waffle Wrote: Wheres the PDO </3
u just keep making me cri even more just stabbit :C
EDIT: On a serious note 1. Dont use stock mysql its so vulnerable and 2. That statement is vulnerable to SQL Injection rip specifically here: 

PHP Code:

SELECT * FROM developers WHERE name = '$name' and software = '$software' 


if you used pdo you could do:

PHP Code:

$sql = $conn->prepare("SELECT * FROM developers WHERE name=:name and software=:software");
$sql->bindParam(":name", $name);
$sql->bindParam(":software", $software);
$sql->execute(); 


Eh read up on PDO also $conn needs to be changed to whatever this is:

$conn = new PDO("mysql:host=" . $servername . ";dbname=". $dbname, $username, $password);

This should work, made it now, read up on PDO (Stands for PHP Data Objects if I remember correctly) its really good
NEVER USE MySQL alone, use either MySQLi or PDO!!!!