Query running script =]

[Romanity]

Heres the query;

INSERT INTO `script_settings` (`settingName`, `settingValue`, `settingLastUpdate`, `settingUpdatedBy`) VALUES ('script_version', '1.0', '$date $time', 'OurHabbo Systems') 

Heres the page its running from;

if(!$_POST["submit"]){
echo "<form method=POST>
SQL:<br>
<textarea name='sql' rows='10' cols='50'></textarea><br><br>
<input type='submit' name='submit' value='Run Query'>
</form>";
}else{
$sql = $_POST[sql];
$query = mysql_query($sql) or die(mysql_error());
if($query){ echo "Query successfully ran"; }else{ echo "There was a problem running the query"; }
} 

(Yes its connected to the database)
& heres the error;

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'script_version\', \'1.0\', \'$date $time\', \'OurHabbo Systems\')' at line 1 

Any reason why its not working?

[Dentafrice,]

It has slashes in it, thats weird?

You use ` and ' too much to my liking.

<?php

if (!$_POST["submit"]) {
    echo "<form method=POST>
SQL:<br>
<textarea name='sql' rows='10' cols='50'></textarea><br><br>
<input type='submit' name='submit' value='Run Query'>
</form>";
} else {
    $sql = $_POST["sql"];
    $sql = stripslashes($sql);
    $query = mysql_query($sql) or die(mysql_error());
    if ($query) {
        echo "Query successfully ran";
    } else {
        echo "There was a problem running the query";
    }
}

?>

[Romanity]

haha whoops my bad... didnt even think of it =]
Ty

[Dentafrice,]

Depending on your server settings it usually adds slashes to (')'s

so \'hey\' just like when you put " inside of a " declaration in PHP.

So you must first strip those, if you want it to be executed properly.

[Romanity]

Oki, heres another prob...

Using forms.. I put this into database

<li><a href="$site_domain">Home</a></li> 

Now, retrieving from database....

    <?
    $nav = mysql_fetch_array(mysql_query("SELECT * FROM `script_templates` WHERE `templateID` = '3'"));
    $templateHTML= stripslashes($nav[templateHTML]);
    echo "$templateHTML";
    ?>

How do i stop it from echoing $site_domain.... but the variable for $site_domain that i have defined previously???

[Dentafrice,]

unset($site_domain);
Right before that

[Romanity]

right before....?

[Dentafrice,]

Right before the whole query.

[Romanity]

<? 
unset($site_domain);
    $nav = mysql_fetch_array(mysql_query("SELECT * FROM `script_templates` WHERE `templateID` = '3'")); 
    $templateHTML= stripslashes($nav[templateHTML]); 
    echo "$templateHTML"; 
    ?>

Still returns a URL link of http://$site_domain/ instead of what $site_domain is set as... yourdomain.com

[Dentafrice,]

Oh, well you can't just pull the HTML out and expect it to parse it as PHP variables..

<?
$nav = mysql_fetch_array(mysql_query("SELECT * FROM `script_templates` WHERE `templateID` = '3'"));
$templateHTML = stripslashes($nav[templateHTML]);
$templateHTML = str_replace("{site_domain}", $site_domain, $templateHTML);
echo $templateHTML;
?>