UGN Security Forums UGN Security: Knowledge Base Programming Web Design, Protocols & Other Languages Help: Simple (yeh, right) application script...

CREATE TABLE `ugn_applications` (
  `id` int(11) NOT NULL auto_increment,
  `name` varchar(20) NOT NULL default '',
  `nick` varchar(20) NOT NULL default '',
  `email` varchar(50) NOT NULL default '',
  `yob` varchar(4) NOT NULL default '',
  `telephone` varchar(20) NOT NULL default '',
  `address` varchar(100) NOT NULL default '',
  `sections` varchar(100) NOT NULL default '',
  `aim` varchar(20) NOT NULL default '',
  `irc` varchar(20) NOT NULL default '',
  `bbs` varchar(20) NOT NULL default '',
  `moderate` varchar(10) NOT NULL default '',
  `admin` varchar(10) NOT NULL default '',
  `news` varchar(10) NOT NULL default '',
  `other` varchar(10) NOT NULL default '',
  `username` varchar(20) NOT NULL default '',
  `password` varchar(20) NOT NULL default '',
  `comments` varchar(255) NOT NULL default '',
  `country` varchar(20) NOT NULL default '',
  `ip` varchar(15) NOT NULL default '',
  `status` varchar(20) NOT NULL default '',
  PRIMARY KEY  (`id`)
) TYPE=MyISAM AUTO_INCREMENT=2 ;

<?php
// Change below to your MySQL Host.
$host = "127.0.0.1";

// change below is your assigned mySQL username
$user = "[username]";

// change to the pw below is your assigned mySQL password
$pw = "[password]";

// change to the database you have permission to connect to
$db = "[databasename]";

$mysql_access = mysql_connect("$host", $user, $pw);
?>

<?php
$query = "SELECT * FROM ugn_applications";
$result = mysql_query($query, $mysql_access);
if(mysql_num_rows($result)) {
    // it is true, so let's print the results to the browser
   while($row = mysql_fetch_row($result))
  {
      print("$row[0]
");
  }
} else {
   // false, no results
}
?>

<?
mysql_close($mysql_access);
?>

if(mysql_num_rows($result)) {
    // it is true, so let's print the results to the browser
   while($row = mysql_fetch_row($result))
  {
      print("$row[0]
");
  }
} else {
   // false, no results
}

<?php
// Change below to your MySQL Host.
$host = "127.0.0.1";

// change below is your assigned mySQL username
$user = "[username]";

// change to the pw below is your assigned mySQL password
$pw = "[password]";

// change to the database you have permission to connect to
$db = "[databasename]";

$mysql_access = mysql_connect($host, $user, $pw) or die(mysql_error());
mysql_select_db($db) or die(mysql_error()); // make sure you add this ;)
?>

<?php
$query = "SELECT * FROM ugn_applications";
$result = mysql_query($query, $mysql_access) or die(mysql_error());
if(mysql_num_rows($result)>0) { // if we have results
	while($result2 = mysql_fetch_array($result)) { 
		echo $row[0]."
\n";
		// or you can do echo "{$row[0]}
\n";
		// tag the \n on for readable html ;)
	}
}
?>
<!-- I presume you have html code here -->
<?
	mysql_close($mysql_access);
	// I usually don't mysql_close, at the end of PHP processing the script all mysql
	// connections are killed unless they're persistant
?>
// notice that I added "or die(mysql_error()); " to all the main SQL functions? 
// this can pinpoint the problem &  will print out an error straight from mysql
// don't put these in final versions though, make your own error msg else you'll
// be giving away free information about your query structure & db structure 
// to hackers trying SQL inject attacks.

<?php

$host = "localhost";

$user = "[username]";

$pw = "[password]";

// change to the database you have permission to connect to
$db = "[databasename]";
	
$db = "bflfrq8";

//Why use variables, save on some lines of code.  You can add a auth scriptlet to this later to make sure they are supposed to be here.

mysql_connect($host, $user, $pw)or die(mysql_error());

mysql_select_db($db) or die(mysql_error()); 
$result = mysql_query("SELECT * FROM ugn_applications") or die(mysql_error());
if(mysql_num_rows($result)>0) { // if we have results
	while($result2 = mysql_fetch_array($result)) { 
		echo $result2[0]."
\n";
		// or you can do echo "".$result2[0]."
\n";
		// tag the \n on for readable html ;)
	}
}
?>
<!-- I presume you have html code here -->
<?
	mysql_close($mysql_access);
	// I usually don't mysql_close, at the end of PHP processing the script all mysql
	// connections are killed unless they're persistant
?>
// notice that I added "or die(mysql_error()); " to all the main SQL functions? 
// this can pinpoint the problem &  will print out an error straight from mysql
// don't put these in final versions though, make your own error msg else you'll
// be giving away free information about your query structure & db structure 
// to hackers trying SQL inject attacks.