Klein probleempje met MSSQL
Errors:
Warning: mssql_query() [function.mssql-query]: message: Incorrect syntax near the keyword 'WHERE'. (severity 15) in C:\web\apache\htdocs\tg\includes\p_functions.php on line 569
Warning: mssql_query() [function.mssql-query]: Query failed in C:\web\apache\htdocs\tg\includes\p_functions.php on line 569
Warning: mssql_num_rows(): supplied argument is not a valid MS SQL-result resource in C:\web\apache\htdocs\tg\includes\p_functions.php on line 571
Code:
Code (php)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
<?php
//lijn 563
$select = mssql_query("SELECT UserID FROM ".$_CONFIG['LoginTable']." WHERE UserID = '".cleandata($_POST['useridreq'])."'");
if(mssql_num_rows($select) != 0)
{
$check = mssql_query("SELECT UserID FROM ".$_CONFIG['VerfTable']." WHERE UserID = '".cleandata($_POST['useridreq'])."'");
if(mssql_num_rows($check) != 0){
mssql_query("UPDATE ".$_CONFIG['VerTable']." set verfcode = '".md5($verfcode)."' WHERE UserID = '".cleandata($_POST['useridreq'])."'");
} else {
mssql_query("INSERT INTO ".$_CONFIG['VerTable']." (UserID, email, verf) VALUES ('".cleandata($_POST['useridreq'])."', '".$_POST['emailadd']."', '".md5($verfcode)."')");
}
?>
//lijn 563
$select = mssql_query("SELECT UserID FROM ".$_CONFIG['LoginTable']." WHERE UserID = '".cleandata($_POST['useridreq'])."'");
if(mssql_num_rows($select) != 0)
{
$check = mssql_query("SELECT UserID FROM ".$_CONFIG['VerfTable']." WHERE UserID = '".cleandata($_POST['useridreq'])."'");
if(mssql_num_rows($check) != 0){
mssql_query("UPDATE ".$_CONFIG['VerTable']." set verfcode = '".md5($verfcode)."' WHERE UserID = '".cleandata($_POST['useridreq'])."'");
} else {
mssql_query("INSERT INTO ".$_CONFIG['VerTable']." (UserID, email, verf) VALUES ('".cleandata($_POST['useridreq'])."', '".$_POST['emailadd']."', '".md5($verfcode)."')");
}
?>
Gewijzigd op 01/01/1970 01:00:00 door Stefan
Plak die in MySQL en kijk wat er fout is. Of plak de queries (de volledige strings inclusief de variabelen) hier, dan kunnen we meer zien. Ik zie het ook niet zo snel, mogelijk in een van je variabelen (' in de tabelnaam?). Misschien ook even database ontwerp erbij ....