[decongh]

I have my hidden id

<input type="hidden" name="id" value="<?php echo "$id" ?>" />

in my form

I have my

$id = $_REQUEST['id'];

to get the id from the url

And on the update script i have

$navtype = $_GET['nav'];

And i have

WHERE id=$id

, but it keep updating just one record over and over,no matter which record i select.

When i make the hidden text, i see the right id

<input type="text" name="id" value="<?php echo "$id" ?>" />

.

I echo

"$sql";

, and the value is always one

UPDATE persoz SET lname='Daniel',fname='Ekow Gilbert Jr.',p_no='012012',todate='2011-01-01', WHERE id=1 

[Dormilich]

decongh, on 03 February 2012 - 05:05 PM, said:

When i make the hidden text, i see the right id

<input type="text" name="id" value="<?php echo "$id" ?>" />

.

that is certainly not what you see in the HTML …

besides that the quotes around $id are superfluous.

[codeprada]

Avoid using $_REQUEST. If your form data was posted then someone can overwrite it back adding their own variables to the URL. This depends on the order of your variables (variables_order) in php.ini.

I'm guessing your form is using the GET method. Either which way dump $_GET or $_POST depending on which one is relevant.

You should also sanitize user input before using it in a query. Have a look at prepared statements from either MySQLi or PDO.

This post has been edited by codeprada: 03 February 2012 - 01:45 PM

[decongh]

are you saying i should use

$_GET

and not

$_POST

?

[Dormilich]

if you use the get method in your form, you should be using $_GET.

[decongh]

my form uses post

[Dormilich]

get => $_GET, post => $_POST