php update sql from form

Question

I have a php script I'm trying to get working which I've basically just pulled from a tutorial and altered to suit my needs. This is my first attempt at php so please go easy on me. I have 3 files - list_records.php - update.php - update_ac.php List_records reads data from a table in mysql. the table in list_records has an edit function which takes you to update.php where it displays the data in db table. Update.php has a submit button which is meant to update mysql using update_ac.php with what ever info you changed using the id field in the url using $_GET['id]. I know this script is very open to slq injections but I'm planning to only use this in a local environment, it wont be exposed to the internet and only myself and one other person will be using this page so its not really an issue. Anyway, I've confirmed a couple of things:- - the id does get picked up using $_Get, i put in a echo and it printed it out on the update.php page. - i can run the update command within the php and…

Accepted Answer

Your update query should be

```
// update data in mysql database 
$sql="UPDATE ports SET Customer='".$_POST['Customer']."', Number='".$_POST['Number']."' WHERE id='".$_POST['id']."'";

$result=mysql_query($sql)or 
die ("this stuffedup");
```

php update sql from form

Solution

Problem