Sab669 posted:

I'm not sure if this belongs in the PHP thread or the SQL thread, but I'm trying to work on an edit page for a list of users.


I've echoed out all of my variables before trying this, so I know they are being passed properly to the edit page, but it's not editing them. I think it's just a minor syntax issue that I'm not used to with web development, but I'm not sure. It just echoes out the Error from my or die statement.

e; Found this? http://www.freewebmasterhelp.com/tutorials/phpmysql/7 The Update section appears to be identical to how I'm trying to do it.

OriginalPseudonym posted:

Please, for the love of all that is good and holy, don't pay any attention to anything that uses mysql_* functions to access databases if you don't need to.

PDO has been in PHP since 2004.

code:

$dsn = "mysql:host=localhost;port=3306;dbname=database";
$pdo_obj = new PDO($dsn, "username", "password", array(PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION));
$query = $pdo_obj->prepare("UPDATE users SET name_first =':fname', name_last= ':lname', 
 username=':uname', pwd = ':pwd', is_teacher =':teacher' WHERE ID = :id");

$query->bindValue(':fname', $fname);
$query->bindValue(':lname', $lname);
$query->bindValue(':uname', $username);
$query->bindValue(':pwd', $password);
$query->bindValue(':id', $id);

$query->execute();

http://net.tutsplus.com/tutorials/php/why-you-should-be-using-phps-pdo-for-database-access/

It's a DB wrapper for PHP that sanitizes input inside bindValue/bindParam, and it's standard on most sane PHP installations. Please, don't go around writing your own db input sanitization if you don't absolutely have to.

(Also, having your variables external to the string and not having to gently caress around with string concatenation? Extremely nice.)

Null Set posted:

There is really no good reason not to do the above.

Aside:
You know you can pass an array of your parameters to execute(), instead of doing a bindValue for every one?

So instead of a long list of binds, you can do execute($query, array(':fname'=>'Original', ':lname'=>'Pseudonym')).

What I usually do for queries is to write a function that takes the query with parameters, and an array of parameters, then does a prepare($query) and execute($parameters), then return the PDOStatement. Then I just have to beat anyone with a 2x4 that doesn't use parameters.

Null Set posted:

You know you can pass an array of your parameters to execute(), instead of doing a bindValue for every one?

So instead of a long list of binds, you can do execute($query, array(':fname'=>'Original', ':lname'=>'Pseudonym')).

fletcher posted:

I don't like doing that, because it makes diffing changes a pain in the rear end. Yeah it's fewer lines, but it's sooo much easier to diff if they are all on separate lines.

Null Set posted:

bindValue as the values come up just seems to be asking for trouble, though. Easy to inadvertently make a change after the value is already bound and not notice it.

mewse posted:

is it important that OTHER_CLASS is const?

Doctor rear end in a top hat posted:

What's the best way to make this work? I want argle::hurfdurf to echo "durf"

php:

<?
class bargle {
  const HURF = 'durf';
}

class argle {
  const OTHER_CLASS = 'bargle';

  public static function hurfdurf() {
    echo self::OTHER_CLASS::HURF;
  }
}
?>

OriginalPseudonym posted:

echo constant(self::OTHER_CLASS . '::HURF') should work, but I don't have a CLI on hand to test it.

Doctor rear end in a top hat posted:

It does work!

fletcher posted:

I'm not completely clear on what those do and what you are trying to do with them, but I think you basically want string concatenation?

php:

<?
if (function_exists("insert_audio_player")) {
  insert_audio_player("[audio:[url]http://www.domain.com/".get_post_meta($post->ID, "mp3", true)."[/url]]");  
}
?>

stoops posted:

sorry it was a bit confusing. i put in your code and it works somewhat, except it's outputting 2 players instead of one, but it still works. so thanks.

quote:

General Error
SQL ERROR [ mysql4 ]
Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (11) [2002]
An sql error occurred while fetching this page. Please contact an administrator if this problem persists.

quote:

The error (2002) Can't connect to ... normally means that there is no MySQL server running on the system or that you are using an incorrect Unix socket file name or TCP/IP port number when trying to connect to the server. You should also check that the TCP/IP port you are using has not been blocked by a firewall or port blocking service.

fletcher posted:

Is he using shared hosting? What is the peak number of users the board is hitting?

Scaramouche posted:

It's a dedicated standalone server, here's his board scrawl:
Total posts 26xxxx • Total topics 15xxx • Total members 4xxx.

I think most users ever (at once) was around 250, when this started happening.

McGlockenshire:
I'm pretty sure it's a resource issue and not a 'mySQL isn't running' issue since it's so intermittent.

Scaramouche posted:

It's a dedicated standalone server, here's his board scrawl:
Total posts 26xxxx • Total topics 15xxx • Total members 4xxx.

I think most users ever (at once) was around 250, when this started happening.

McGlockenshire:
I'm pretty sure it's a resource issue and not a 'mySQL isn't running' issue since it's so intermittent.

Dance The Mutation posted:

I have a pretty dumb question related to PHP/mySQL. I'm new to the language and working on a site for a coworker. I was just curious how to handle data in a mySQL database that may or may not be empty.

Dance The Mutation posted:

When I check the database in PHP, do I use a basic boolean type conditional (if value == null)?

Hammerite posted:

Hammerite posted:

They are the mysql library (obsolete, but still gets used a lot because of outdated example code on the net that uses it), the mysqli library, and PDO. Mysqli uses PHP's null value to represent NULL values from the database. I do not know what the other two do.

Dance The Mutation posted:

Another really dumb question that I can't seem to find a specific answer on the web. In regards to variable scope, I understand the whole using variables inside of functions and outside and all that but what about separate php calls in one html document? For example at the top of my document I have

code:

<?php 
session_start();
$user = $_SESSION['myusername'];
include("functions.php");
?>

and later on I have the code where I act on the information that pertains to that user. I'm specifically asking in the context of session management but I want to understand how/why this works. My $user variable is used fine later on in the document when I do the mySQL queries with that variable.

Dance The Mutation posted:

Another really dumb question that I can't seem to find a specific answer on the web. In regards to variable scope, I understand the whole using variables inside of functions and outside and all that but what about separate php calls in one html document? For example at the top of my document I have

code:

<?php 
session_start();
$user = $_SESSION['myusername'];
include("functions.php");
?>

and later on I have the code where I act on the information that pertains to that user. I'm specifically asking in the context of session management but I want to understand how/why this works. My $user variable is used fine later on in the document when I do the mySQL queries with that variable.

Golbez posted:

I've set up a local Windows development environment, and some of the code is going much slower than in Linux. Now, part of this might be the database connection time - before, it was on the same machine as the MySQL server, whereas now it's 200 miles away - but I'm not sure that accounts for some of the massive slowness I'm seeing. Are there any functions that are known to be slower in Windows than in Linux?

McGlockenshire posted:

Anything cryptography-related can be dramatically slower in Windows due to how OpenSSL (doesn't) use Windows' built in crypto facilities.

Golbez posted:

mcrypt is used but only a few times... but after switching the database to use the local read-only one instead of the main one 200 miles away, it sped up to almost usable speeds. In other words, it's the connection lag. Which means 1) I have to still test on the remote server, and 2) I really need to make this thing more efficient, because being local to the database is allowing for inefficiencies. (To give an example: This one action involves somewhere around *6400 queries*. On the server where it's local to the database, this takes a couple of seconds. But my poor machine 200 miles away is choking on the connections.)

fletcher posted:

6400 queries?? What the heck is it doing?

fletcher posted:

6400 queries?? What the heck is it doing?