473,320 Members | 1,861 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

Getting data from form via php into mysql

I've done it before... on a different site.
Set up all the test enviorns I could... no change, no clue.
No .htaccess to block any transactions.. at least what I could see up to the root level.

Get the following in the url, before even getting to the update /insert coding I'm wanting to do.
(end of coding line.

admin/%3C?BS();?%3E


Calling code that *seems* to be calling it:
Expand|Select|Wrap|Line Numbers
  1.         echo "<td>";
  2.         echo "<a href='Invoice.php?id=$id'>View&nbsp;Invoice</a><br/><br/>\n";
  3.         echo "<a href='Packing.php?id=$id'>Packing&nbsp;Slip</a><br/><br/>\n";
  4.         echo "<input name='sub17' type='submit' value='Update Data'></form>";
  5.         echo "</td>";
  6.         echo "</tr>\n";
  7.  
Have something similar in three othere files, but on a different host.


Simplistic update statement in the "BS" function:
Expand|Select|Wrap|Line Numbers
  1.      $upShi="UPDATE ActualShipping SET OrderID=$id,actualShipCost=$ASC,trackingNbr='$trNum'";
Just to give INSERT its due, I tried it and got the same exact error with the same exact gobbly gook
Expand|Select|Wrap|Line Numbers
  1.     $Ishi="INSERT INTO ActualShipping (OrderID,actualShipCost,trackingNbr) 
  2.     VALUES=($id,$ASC,'$trNum')";
[Please use CODE tags when posting source code. Thanks! --pbmods]

Get the ugly FORBIDDEN error.

Any ideas?? Wheels are spinning, not going anywhere, about ready to fall off.

thanks heaps (hopefully)
Jul 9 '07 #1
1 1586
pbmods
5,821 Expert 4TB
Heya, sjambok. Welcome to TSDN!

Make sure your admin script has read (and execute, on *n?x systems) permissions.
Jul 9 '07 #2

Sign in to post your reply or Sign up for a free account.

Similar topics

0
by: Willoughby Bridge | last post by:
Hi - Having trouble getting a multipart series of forms to move to the next form. The problem line is: <form method="post" enctype="multipart/form-data" action="Data_Form1.php"> If the...
6
by: Teep | last post by:
Below is my code for dropdownlist that is populated from a SQL table. After a selection from the ddl, a datagrid is suppose to come up pertaining to the information selected, but I keep getting a...
6
by: Erik H. | last post by:
Trying to connect to MySQL db on localhost, and populate datagrid from a dataset using code inline method. Getting the following compile error: Error Message: "CS0246: The type or namespace...
1
by: Miku | last post by:
Hi Guies, I am new to vb.net. In my project I am using vb.net & MySql 4.0.17 as a backend. For database connectivity i have downloaded ByteFX - Mysql .net native provider. I have written the...
2
by: PHP_Paul | last post by:
Ok, I'm trying to poineer into the wonderful area of PHP/MySQL programming, but I'm having some difficulties. http://www.paulhq.com/php/freepage.html should register, but when anyone fills something...
4
by: dac | last post by:
I am quietly going insane on this project. I've never worked on a project like this one before. All my previous sticky forms were for data entry, not editing. I don't know how to display the form...
3
by: h4xPace | last post by:
I am building a MySQL query application, and I have run into a small snag. MySQL has released a set of classes that extend the .NET framework base data classes (command, connection, etc), and I am...
6
by: sathyashrayan | last post by:
Dear Group, Please look at the following demo link. http://www.itsravi.com/demo/new_pms/admin/addproject.php
10
by: jonathan184 | last post by:
Hi I tried getting this to work through dreamweaver but it did not. So i found a n example on the internet , i followed everything exactly the search script does not work. Could somebody help me...
3
by: ist | last post by:
Hi, I am trying to get (and transfer over ASP.NET) some encrypted data from some MySQL fields. Since the data contains many unicode characters, I tried to get the data as a series of ASCII...
0
by: DolphinDB | last post by:
The formulas of 101 quantitative trading alphas used by WorldQuant were presented in the paper 101 Formulaic Alphas. However, some formulas are complex, leading to challenges in calculation. Take...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.