155
I've wrestled with this code all day and I just can't figure out what the problem is.
I have this same code on the add_job.php page and the edit_job.php page and neither one is enter in the correct information into the database.
But first here's a synopsis of what happens up to this point:
The registration script adds users to the users table and a row in that table is named stateid. The information that goes into this stateid row is selected from a select list from the states table. The rows in this table are postal and statename and they've already been filled in. The statename is the name of a State like (Georgia) and postal is the 2 or 3 letter abbreviation of that state, i.e. (GA). I used 3 letters for a couple of states because I had problems with them in queries, like Indiana (IN) is now IND and Oregon (OR) id now ORG.
The registration script checks the state before entering it into the database:
[PHP]// Check for a state.
if (eregi ('^[[:alpha:]\.\' \-]{2,3}$', stripslashes(tr im($_POST['state'])))) {
$s = escape_data($_P OST['state']);
} else {
$s = FALSE;
echo '<p><font color="red" size="+1">Pleas e enter your state!</font></p>';
}[/PHP]I don't know if this is right or not, but it does enter the correct state abbreviation into the users table row stateid.
The login script checks the database table users for correct email and password, and if it matches sets the session variable [PHP]$_SESSION['stateid'] = $row[8];[/PHP] correctly -in this case AL for Alabama.
OK, now we're ready to add a job to the jobs table and this is where our problems begins. All the other information enters in correctly, just the 2-3 letter postal code for the state gets screwed up. Here is the code to handle the state:
[PHP]<?php
$query = "SELECT postal,statenam e FROM states where postal = '{$_SESSION['stateid']}'";
$result = mysql_query($qu ery);
while($row = mysql_fetch_arr ay($result, MYSQL_ASSOC))
{
$postal = stripslashes($r ow['postal']);
$statename = stripslashes($r ow['statename']);
echo "<option value'$postal' selected='selec ted'>$statename </option>";
}
$query = "SELECT postal,statenam e FROM states ORDER BY postal";
$result = mysql_query($qu ery) or die(mysql_error ());
while($row = mysql_fetch_arr ay($result, MYSQL_ASSOC))
{
$postal = stripslashes($r ow['postal']);
$statename = stripslashes($r ow['statename']);
echo "
<option value='$postal' >$statename</option>
";
}
?>
</select>[/PHP]Here's the code that processes the form:
[PHP]<?php
if (isset($_POST['submitted']))
{
include('includ es/mysql_connect.p hp');
$cat_id = mysql_real_esca pe_string($_POS T['cat_id']);
$job_position = mysql_real_esca pe_string($_POS T['job_position']);
$city = mysql_real_esca pe_string($_POS T['city']);
$state_id = mysql_real_esca pe_string($_POS T['state_id']);
$display_name = mysql_real_esca pe_string($_POS T['display_name']);
$status = mysql_real_esca pe_string($_POS T['status']);
$content = mysql_real_esca pe_string($_POS T['content']);
$query = "INSERT INTO jobs VALUES ('', '".$_SESSION['user_id']."', '".$_SESSION['company_name']."', '".$display_nam e."', '".$cat_id." ', '".$state_id."' , '".$job_positio n."', '".$status." ', '".$city."', '".$content. "', now())";
$result = mysql_query($qu ery) or die('Error, query failed mysql said <b>'.mysql_erro r().'</b>');
if ($result)
{
echo "<br><span style='color:re d'><strong>Entr y Added!</strong></span><br><br><a href='add_job.p hp'>Enter another Job Ad</a>";
}
else
{
echo "<br><span style='color:re d'><strong>Ther e was an error! The category was not created.</strong></span>";
}
include('bottom .php'); // Include the HTML footer.
exit();
mysql_close();
}
?>[/PHP]
The edit script uses this same state select code, and here is the update processing code :
[PHP]<?php
if ($_POST["submit"])
{
$job_position = mysql_real_esca pe_string($_POS T['job_position']);
$city = mysql_real_esca pe_string($_POS T['city']);
$display_name = mysql_real_esca pe_string($_POS T['display_name']);
$cat_id = mysql_real_esca pe_string($_POS T['cat_id']);
$state_id = mysql_real_esca pe_string($_POS T['state_id']);
$status = mysql_real_esca pe_string($_POS T['status']);
$content = mysql_real_esca pe_string($_POS T['content']);
$sql = "UPDATE jobs SET display_name='$ display_name', cat_id='$cat_id ', state_id='$stat e_id', job_position='$ job_position', status='$status ', city='$city', content='$conte nt' WHERE id=$id";
$result = mysql_query($sq l);
if($result)
{
echo "<br><br><p align='center'> <span style='color:re d'>Job ad updated.</span><br><br><a href='edit_jobs .php'>Edit another job ad</a></p>";
}
else
{
echo "<br><br><p align='center'> <span style='color:re d'>There was an error! Job ad did not update.</p>";
}
}
}
?>[/PHP]
What it's doing is putting the full state name of the stateid session in the state_id row instead of the 2-3 letter abbreviation. As much of it as it can since it's varchar (4).
I'd really like to put this one to bed, so if anyone can see where I'm making my mistake, I'd appreciate you're pointing it out to me.
Thanks.
David
