Inserting Value in SQL

[modfiles]

My head is spinning again coz im thinking why i cant insert in mySQL the input value in text box. Can anyone help me with this. If I change

<form method="get" action="index.php">

to

<form method="post" action="index.php">

the input will save in sql but it will not return any search result.
Heres the code:

<form method="get" action="index.php">
    <div>
    <input type="text" name="search"/>
    <input type="submit" value="<?=$lang[Search]?>"/>
    <input type="hidden" name="source" value="some_value"/>
    </div>
    </form>
    <div>
    <b>Some Project</b><br/>
    <?php
    $search=$_POST["search"];
    $spaces = str_replace(" ","",$search);
    if($spaces != "" && $search != "") {
    $spacez = str_replace(" ","",$search);
    $kill = str_replace("'","",$search);
    if(strlen($search) < 26) {
    if($spacez != "" && $search != "") 
      {
        $check = mysql_num_rows(mysql_query("SELECT * FROM search WHERE query = '$kill'"));
        if($check < 1) 
      {
        mysql_query("INSERT INTO search VALUES('','$search','0')");
        } else {
        mysql_query("UPDATE search SET searches = searches+1 WHERE query = '$search'");
        }
    }
  }
}

[Guest]

try this

shouldnt the insert query look like "INSERT INTO SEARCH (FIELDNAME1,FIELDNAME2,FIELDNAME3) VALUES(VALUE1,VALUE2,VAKLUE3)"

iam just guessing !hope it works

[makvanpor2000]

am getin this wreong

[modfiles]

^
your post yesterday was deleted by mods cause it was no help/nonsense/spam and you posted another one again. lol.

nahsorhseda, that code is working fine. im just having problem with GET and POST.

[Guest]

replace

$search=$_POST["search"];

with

$search=$_REQUEST["search"];

[Loony]

<form method="post" action="index.php">

<form method="post" action="index.php">
    <div>
    <input type="text" name="search"/>
    <input type="submit" value="<?=$lang[Search]?>"/>
    <input type="hidden" name="source" value="some_value"/>
    </div>
    </form>
    <div>
    <b>Some Project</b><br/>
    <?php
    $search=$_POST["search"];
    $spaces = str_replace(" ","",$search);
    if($spaces != "" && $search != "") {
    $spacez = str_replace(" ","",$search);
    $kill = str_replace("'","",$search);
    if(strlen($search) < 26) {
    if($spacez != "" && $search != "") 
      {
        $check = mysql_num_rows(mysql_query("SELECT * FROM search WHERE query = '$kill'"));
        if($check < 1) 
      {
        mysql_query("INSERT INTO search VALUES('','$search','0')");
        } else {
        mysql_query("UPDATE search SET searches = searches+1 WHERE query = '$search'");
        }
    }
  }
}

i edited your post in the quote try that
try not to use get or request its not as secure

[syrus]

 

        $check = mysql_query("SELECT * FROM search WHERE query LIKE '%$kill%'"); 
while($sresults = mysql_fetch_array($check))
{ echo "$sresults[0] <br />"; }

[djlee]

are you insane id suggest

  mysql_query("INSERT INTO search VALUES('','".mysql_real_escape_string($search)."','0')");

before someone drops ur tables