$_GET and mysql?

[GarettM]

Can i use $_GET to fetch arrays?

say $_GET['username']
if(!$_GET['username'])
{
die();
} else {
("SELECT * FROM `users` WHERE `examplename` = ".$_GET['username']."")
}

Can you do this or is it a stupid way of fetching user information?

 

[Feedback]

I'm rusty with PHP, but there is better ways of fetching user information, like using OOP, and sessions.. But, your code wouldn't really work, as I don't understand why you would have to do it like that, something more simple, IMO, would be;

if($_GET['username'])
{
mysql_query('SELECT * FROM users WHERE examplename = '" . $_GET['username'] . "'');
} else {
die();
}

But, using sessions will only allow users to access a page, if that's what you want. (Session, else die.)

It really depends on how you want it coded.

 

[Markshall]

<?php
if (isset( $_GET['username'] ))
{
    $user = mysql_real_escape_string( $_GET['username'] );
    $checkQ = @mysql_query( "SELECT * FROM `users` WHERE `username` = '" . $user . "' LIMIT 1" );
    if (mysql_num_rows( $checkQ ) == 0)
    {
        echo 'This user does not exist.';
    }
    else
    {
        $row = @mysql_fetch_array( $checkQ );
        echo $row['email'] . '<br />';
        echo $row['joindate'] . '<br />';
        echo $row['rank'];
    }
}
else
{
    echo 'No username set.';
}
?>

Should do it I think.

 

[GarettM]

Thanks Monsta But i already Codded what i needed codded
but i am gonna use the $user = mysql_real_escape_string( $_GET['username'] ); Do You want credits in the profile page ;P

 

[brsy]

Thanks Monsta But i already Codded what i needed codded
but i am gonna use the $user = mysql_real_escape_string( $_GET['username'] ); Do You want credits in the profile page ;P

Why not make a secure function?

function secure($str) {
  mysql_real_escape_string(htmlentities($str));
}

 

[GarettM]

Why not make a secure function?

function secure($str) {
  mysql_real_escape_string(htmlentities($str));
}

For The project that was needed for the functions were already codded but this could be useful later on in life on other projects

 

[brsy]

For The project that was needed for the functions were already codded but this could be useful later on in life on other projects

Are you aware of what does function actually does?

 

[GarettM]

yes Doesnt it add \ infront of " i believe other then that no i don't see me using this soon