i have website users can login , register. now, want users update profile. have trouble updating database. table name "members." nothing happens whenever submit form.
<?php if(isset($_post["submit"])){ $value1 = $_post['year']; $value2 = $_post['astatus']; $value3 = $_post['address']; $value4 = $_post['phone']; $value5 = $_post['email']; $newpass = $_post['pass']; $newpass2 = $_post['pass2']; $user=$_session['sess_user']; $conn = new mysqli('localhost', 'admin', 'password') or die(mysqli_error()); //select db database $db = mysqli_select_db($conn, "database") or die("database error"); //selecting database $update_user="update '".members."' set year='".$value1."', astatus='".$value2."', address='".$value3."', phone='".$value4."', email='".$value5."', pass='".$newpass."' '".user."'='".$user."'"; if(isset($_session["editerror"])){ session_destroy(editerror); } session_start(editsuccess); $_session["editsuccess"] ="your student profile has been updated."; header("location:profile.php"); } else{ echo "error"; } ?>
note : alwayes use mysqli_real_escape_string — escapes special characters in string use in sql statement, taking account current charset of connection
http://www.w3schools.com/php/func_mysqli_real_escape_string.asp
use prepare statement when updating
http://php.net/manual/en/mysqli.prepare.php
you forget execute query
$update_user="update `members` set `year`='".$value1."', `astatus`='".$value2."', `address`='".$value3."', `phone`='".$value4."', `email`='".$value5."', `pass`='".$newpass."' `user` ='".$user."'"; if ($conn->query($update_user) === true) { session_start(editsuccess); $_session["editsuccess"] ="your student profile has been updated."; header("location:profile.php"); } else { echo "error updating record: " . $conn->error; } 
Comments
Post a Comment