Conversion/update to PDO

[horacemlles]

Sean thanks for your previous reply. I am still trying to convert the grid to PDO, I am running into a problem in the save().

attached is the update currently generated. I am not sure why it is not selecting the ThumbnailLocation field as a field. I am not sure how to correct this aspect of the script. Or what would make it assign this string to index 0 of the $colsArray :

UPDATE tutorials SET 0='http://cmivfx.com/images/thumbs/1295276575_IconThumbLarge.jpg',`Title`='Fusion Tracking 2011',Price='59.95',TutorialID='275',DateCreated='2011-01-17 08:25:10',CategoryID='10',active='0' WHERE TutorialID = '275''

here is a screen shot of what comes up on the screen, I know this is generated because the update is not working.

I hope you have a suggestion of how I might be able to fix this..

Miles

[optikalefx]

It probably is selecting the thumbnail, but the thumbnails are broken. Try using some image off google or something from your local computer as the src for the thumbnail.

So 1) Can you confirm an image is being put there. And 2) if it is, then you're good just use a non broken image. If it's not putting anything there, I need to see your HTML.

[horacemlles]

Hi Sean,

Sorry it taken this long to get back to you, but I work from 8:00am to 6:30 pm M- Th. I try to get up daily about 4 am to work on this while my mind is the clearest. lol...anyways take a look at he update below that is the major concern at this point. It is using the index 0 as a field name, rather than the actual field name and I can not figure out why.

UPDATE tutorials SET 0='http://cmivfx.com/images/thumbs/1295276575_IconThumbLarge.jpg',`Title`='Fusion Tracking 2011',Price='59.95',TutorialID='275',DateCreated='2011-01-17 08:25:10',CategoryID='10',active='0' WHERE TutorialID = '275''

see the 0 in the above update request for the field name, it is preventing the update from working. I believe that some how the ThumbnailLocation field is protected in some kind of way because it not being selected as one of the saveable fields. I have tried to figure out how the security attribute works in either PHP or Mysql that would prevent the field from being select but I have been unsuccessful so far. Below is an image of the grid as produced with the current code on the Users grid, you can see the broken link for the image shows up where the good image should be. That is an easy enough fix. My main concern at this point is figuring out why it is trying to use "0" as a field name instead of the actual field name in the update query.

[optikalefx]

Huh that is strange. Can you make a zip for me of your files? there isn't enough information presented here for me to make an educated guess and since you're changing the grid.php file I don't know what changes were made there.

[horacemlles]

Here are the two files. I tried to drop a zip file created with winrar here, but it said it was unsupported so here are the two files I have modified ajax.php and grid.php

ajax.txt
grid.txt
grid.txt

[optikalefx]

Can you send me the JSON response from your ajax.php?

[optikalefx]

And the HTML you're using to call it all

[optikalefx]

You can always send a zip to my sean@square-bracket.com email

[horacemlles]

Ok I will send it all this evening, right now I need to get out of the door
to work. Have a great day.

On Tue, Jan 12, 2016 at 6:41 AM, Sean Clark notifications@github.com
wrote:

You can always send a zip to my sean@square-bracket.com email

—
Reply to this email directly or view it on GitHub
#92 (comment)
.

[optikalefx]

This tells me the answer right here

[0] => http://cmivfx.com/images/thumbs/1295276575_IconThumbLarge.jpg
                    [1] => Fusion Tracking 2011
                    [2] => 59.95
                    [3] => 275
                    [4] => 1295276575_IconThumbLarge.jpg
                    [5] => 2011-01-17 08:25:10
                    [6] => 10
                    [7] => 1
                    [thumb] => http://cmivfx.com/images/thumbs/1295276575_IconThumbLarge.jpg
                    [Title] => Fusion Tracking 2011
                    [Price] => 59.95
                    [TutorialID] => 275
                    [ThumbnailLocation] => 1295276575_IconThumbLarge.jpg
                    [DateCreated] => 2011-01-17 08:25:10
                    [CategoryID] => 10
                    [active] => 0

You're not fetching just the columns. You're fetching the columns AND an array of the columns. Ill see if I can find where that call is

[optikalefx]

You need to do this instead of just fetch. $result = $sth->fetch(PDO::FETCH_ASSOC); inside of queryMulti

[horacemlles]

Thanks, I see the error of my ways now. I actually had read that it would default to both but failed to connect it with what I was doing. Attention to details. The update is formatted correctly now but it is still erroring out. I believe it is reading the entire string as a single quote. Not sure I am saying this correctly so I will just post the debug. If I remove the " ' " at the beginning and the end the update will work. So it appears that somehow the beginning and ending single ticks are being read. Causing it error out. I am probably wrong but that is what it looks like to me. Thanks for all your help.. I really do appreciate it.

string 'UPDATE tutorials SET Title='Fusion Basics 2011',Price='59.95',TutorialID='273',ThumbnailLocation='1292604791_Thumb.png',DateCreated='2010-12-15 13:25:26',CategoryID='13',active='1' WHERE TutorialID = '273'' (length=221)

[horacemlles]

Actually,
It maybe coming from the _safemysql function. I commented out the following lines earlier
/* this is the original code line
$postReturn[$key] = mysql_real_escape_string(urldecode($value));
*/
I hadn't figured out how to reproduce reconstruct this line in PDO. If that is correct and you correct it then please dont give me the quick answer right away, I would like to try and figure it out this evening. If I cant get there, I will let you know either way. (just part of my learning experience) Thanks

Miles

[optikalefx]

You shouldn't need that line anymore with PDO. By definition it is prepared statements that are safe to insert into mysql.

What is the error you're getting? The string when printed out will have quotes around it. So I wonder if the error is something else. What and when is the error?

[horacemlles]

It is not giving an error number, it just says error and displays the
json information. It is occuring immediately when you press the save
button. I can send a screen shot when I get home..

On Wed, Jan 13, 2016 at 7:01 AM, Sean Clark notifications@github.com
wrote:

You shouldn't need that line anymore with PDO. By definition it is
prepared statements that are safe to insert into mysql.

What is the error you're getting? The string when printed out will have
quotes around it. So I wonder if the error is something else. What and when
is the error?

—
Reply to this email directly or view it on GitHub
#92 (comment)
.

[optikalefx]

yea, I need to see what is throwing an error. If it's a mysql error then it would have some detail