[raven21]

echo '	   <table border="0" width="530" align="center" cellspacing="1">
					<col width="100" align="right">
				  <col width="410" align="left">				  
		
 		
 			<?php
 				
				$query = "SELECT cat_id,category from ffecategory";
 				$result = @mysql_query($query);
 				$options ="";
 				
 				while ($row = mysql_fetch_array ($result)){
 				 	$cat_id = $row['id'];
 				 	$category = $row['category'];
					echo'<option value=\"$cat_id\">".$category.'</option>';
					}

 			 ?>
 					 <tr><td>Category</td>
					 <td><SELECT NAME =cat_id>
					 <OPTION VALUE =0>Choose Category
					 <?=$options?>
					 </SELECT>
					 
					 
					 </td>
				  </tr>

It produces this error :
Parse error: parse error, unexpected T_STRING, expecting ',' or ';' in /var/www/html/ffe/update.php on line 120

need some help please

[no2pencil]

Don't you just love syntax highlighting?



Your single quote in the ROW array is closing the start quote of your echo command. Either escape your quotes or don't use them on array elements.

[raven21]

I tried removing the qoutes but still same error was showed.

[no2pencil]

Your errors are in your syntax. Can you post your updated code please?

[raven21]

echo '	   <table border="0" width="530" align="center" cellspacing="1">
					<col width="100" align="right">
				  <col width="410" align="left">				  
		
 		
 			<?php
 				
				$query = "SELECT cat_id,category from ffecategory";
 				$result = @mysql_query($query);
 				$options ="";
 				
 				while ($row = mysql_fetch_array ($result)){
 				 	$cat_id = $row[id];
 				 	$category = $row[category];
				 echo	<option value=\"$cat_id\">.$category."</option>;
					}

 			 ?>
 					 <tr><td>Category</td>
					 <td><SELECT NAME =cat_id>
					 <OPTION VALUE =0>Choose Category
					 <?=$options?>
					 </SELECT>
					 

- The drop down menu already appears but it doesn't contain list from the database except for the word "Choose Category". And it also shows

.$category."

before the drop down.

Attached image(s)

• 

This post has been edited by raven21: 06 January 2010 - 11:25 PM

[no2pencil]

Should work :

  <table border="0" width="530" align="center" cellspacing="1">
	<col width="100" align="right">
	<col width="410" align="left">

<?php
  $query = "SELECT cat_id,category from ffecategory";
  $result = @mysql_query($query);
  $options ="";
?>
	<tr><td>Category</td>
	<td><SELECT NAME =cat_id>
	<OPTION VALUE =0>Choose Category</option>
<?php
  while ($row = mysql_fetch_array ($result)){
	$cat_id = $row[id];
	$category = $row[category];	
	echo "<option value=\"$cat_id\">$category</option>";
  }
?>
  </SELECT>

[raven21]

The codes before the drop down menu disappeared and it still not contain the list from the database.

Attached image(s)

• 

This post has been edited by raven21: 07 January 2010 - 12:40 AM

[no2pencil]

One of these is not like the other...

  $query = "SELECT cat_id,category from ffecategory";
  $cat_id = $row[id];

[RPGonzo]

You should ALWAYS ALWAYS ALWAYS enclose the array element with quotes, PHP will throw notices if you have it without them and could cause more issues down the row.

The error with your original code was in this one line

echo'<option value=\"$cat_id\">.$category.'</option>';

you stepped out of your echo quote with a double quote instead of a single quote, should look like

echo'<option value="' . $cat_id . '">' . $category . '</option>';

notice the step out of the single quote before the variable $cat_id and $category and also the removlal of the escaping of the double quotes around $cat_id

if you don't want to have to step in and out of the echo line you could also use something along the lines of

echo"<option value='$cat_id'>$category</option>";

as long as all your data within your variables are properly escaped

again i can't stress how much you NEED the quotes in the array elements

RIGHT

$cat_id = $row['id'];

WRONG

$cat_id = $row[id];

This post has been edited by RPGonzo: 07 January 2010 - 01:50 PM

[relic5.2]

only use echo"<option value='$cat_id'>$category</option>"; when the variable doesn't use a single quote. It'd be preferable enclose the variable in escaped double quotes for that reason.

This post has been edited by relic5.2: 07 January 2010 - 02:29 PM

[RPGonzo]

hence my statement right after that line of properly escaped data, i have no issues using this method in ALL of my code but i do insure all data is properly sanitized before hand

[relic5.2]

Normal methods of escaping data for displaying on a webpage will not escape single quotes. addslashes in that case is not correct. a str_replace would have to be done, and that's not taught in most manuals, so it makes sense to highlight a method of escaping them properly.

This post has been edited by relic5.2: 07 January 2010 - 07:45 PM

[raven21]

@relic5.2

I'd already tried doing your codes but it gives me the parse error instead

This post has been edited by raven21: 07 January 2010 - 08:07 PM

[relic5.2]

did you use echo"<option value="$cat_id">$category</option>" ?

echo"<option value=\"$cat_id\">$category</option>" is what should be used.

[raven21]

What should i do next????

I already check my query as well as my connection to database. it works fine.