NOt able to update existing data of a application form.

[itsmenarwal]

I am editing my application form.So what i am Doing telling you here..I am already logged in

* First of all i am giving a edit link(edit_profile1.php) on my home page
* NOw i am asking again for username and password so that unauthorized user can not making editing in your profile
* NOw on edit_profile1.php i am checking username and password sent by user to the username and password stored in database
* If username and password are correct then i am redirected to edit_profile2.php
* Here I am creating a form with same text boxes as i used in filling the application form(i am using same name for boxes).Here is a button with name update

For the last page edit_profile3.php i am giving coading here

<?php
 
    $con=mysql_connect("localhost","root","");
        if(!$con)
        {
        die('Could Not Connect:'.mysql_error());
        } 
        mysql_select_db("tcs",$con);
 
$usr=$_POST["username"];                 
$pwd=hash('sha1',$_POST['password']);   
 
$query="select * from employee where Username='$usr' and Password='$pwd'";   
 
$result=mysql_query($query,$con);
 
 
if ($result) 
{
 
$row=mysql_fetch_array($result);
$sql="update employee set ($row['Username']=$usr,$row['Password']=$pwd)";
 
$deepak=mysql_query($sql,$con);
 
if($deepak)
{
    echo "Updation Successfull"
}
 
}
?>
 

Now when i excute this error is coming like this Parse error: syntax error, unexpected T_ENCAPSED_AND_WHITESPACE, expecting T_STRING or T_VARIABLE or T_NUM_STRING in F:\Study Material\Linux\xampp\htdocs\edit_profile3.php on line 21

Line number 21 is
$sql="update employee set ($row['Username']=$usr,$row['Password']=$pwd)";

NOw i am not getting where i am getting wrong.Plz also tell me is there any other method for updating application forms any another logic.Plz check out above.

[Dormilich]

one of the variable content’s could break your query string. hard to tell without the actual values.

[itsmenarwal]

this is the last file actaul code...u tell me what u want should i send all files

[Dormilich]

I don’t need further files, it’s the sql string itself that makes the problems.

actually, this sql looks a bit twisted … and I don’t understand it’s purpose at all

$sql="update employee set ($row['Username']=$usr,$row['Password']=$pwd)";

[Atli]

Yea, be very very careful about using that SQL query. (Or rather; a working version of that SQL query). It has no WHERE or LIMIT clause, so it will update EVERY row in the table with those values.

But to fix the error:

$str = "This works: $_POST[stuff]";
$str = "This doesn't: $_POST['stuff']";
$str = "But this does: {$_POST['stuff']}";
 

See the differences there?
If you want to include the quotes in the array element names inside a string, it needs to be wrapped in brackets: {}. If you do not use brackets, the elements can not be quoted.