Jsp, Tomcat, J2Ee, Hibernate Programming, Http Web Server Blog

MANAGING CONTENT // create database (Web hosting domain names) connection $conn =

humphreyblogart — Tue, 10 Jun 2008 07:14:44 +0000

MANAGING CONTENT // create database connection $conn = dbConnect(’admin’); // get details of selected record if (isset($_GET[’article_id’]) && !$_POST) { // prepare SQL query $sql = ‘SELECT article_id, title, article FROM journal WHERE article_id = ?’; // initialize statement $stmt = $conn->stmt_init(); if ($stmt->prepare($sql)) { // bind the query parameters $stmt->bind_param(’i', $_GET[’article_id’]); // bind the results to variables $stmt->bind_result($article_id, $title, $article); // execute the query, and fetch the result $OK = $stmt->execute(); $stmt->fetch(); } } // redirect if $_GET[’article_id’] not defined if (!isset($_GET[’article_id’])) { header(’Location: http://localhost/phpsolutions/admin/ . journal_list.php’); exit; } // display error message if query fails if (isset($stmt) && !$OK && !$done) { echo $stmt->error; } ?> Although this is very similar to the code used for the insert page, the first few lines are outside the conditional statements. Both stages of the update process require the include files, the removal of backslashes, and the database connection, so this avoids the need to duplicate the same code later. Two flags are initialized: $OK to check the success of retrieving the record, and $done to check whether the update succeeds. The first conditional statement makes sure that $_GET[’article_id’] exists and that the $_POST array is empty. So the code inside the braces is executed only when the query string is set, but the form hasn t been submitted. You prepare the SELECT query in the same way as for an INSERT command, using a question mark as a placeholder for the variable. However, note that instead of using an asterisk to retrieve all columns, the query specifies three columns by name like this: $sql = ‘SELECT article_id, title, article FROM journal WHERE article_id = ?’; 365
If you are searching for cheap webhost for your web application, please visit MySQL5 Web Hosting services.

Free web host - PHP SOLUTIONS: DYNAMIC WEB DESIGN MADE EASY //

humphreyblogart — Mon, 09 Jun 2008 15:06:35 +0000

PHP SOLUTIONS: DYNAMIC WEB DESIGN MADE EASY // prepare the SQL query $sql = “UPDATE journal SET title = ‘$title’, article = ‘$article’ WHERE article_id = $article_id”; // submit the query $done = mysql_query($sql) or die(mysql_error()); } // redirect page on success or $article_id is invalid if ($done || !isset($article_id)) { Most of this code should be familiar. Any backslashes inserted by magic quotes will have been removed by nukeMagicQuotes() because you placed it outside the conditional statements in step 1, so this code block begins by passing items in the $expected array to mysql_real_escape_string() to prepare them for insertion into the database, and storing them in shorter variables ($title, $article, and $article_id). Because it s possible to tamper with a hidden field, you make sure that $article_id is numeric before carrying on. In the UPDATE query, strings need to be quoted, so the entire query is enclosed in double quotes, with $title and $article in single quotes. Although the mysql_query() function returns a result set from a SELECT query, with UPDATE, it returns true or false. So, if the update succeeds, $done is reset to true. You need to add $done || to the condition that controls the page redirection script. This redirects the page either if $done is true or if $article_id is invalid. 8. Save journal_update.php and test it by loading journal_list.php, selecting one of the EDIT links, and making changes to the record that is displayed. When you click Update record, you should be taken back to journal_list.php. You can verify that your changes were made by clicking the same EDIT link again. Check your code, if necessary, with journal_update_mysql02.php. PHP Solution 13-6: Updating a record with MySQL Improved Use journal_update01.php fromthe download files. The code for the first stage of the update process is in journal_update_mysqli01php, and the final code is in journal_update_mysqli02.php. 1. The first stage involves retrieving the details of the record that you want to update. Put the following code above the DOCTYPE declaration: Please visit our professional web hosting services to find out about cheap and reliable webhost service that will surely answer all your demands.

MANAGING CONTENT The Update entry button (Top ten web hosting) doesn t do

humphreyblogart — Sun, 08 Jun 2008 23:19:15 +0000

MANAGING CONTENT The Update entry button doesn t do anything yet. Just make sure that everything is displayed correctly, and confirm that the primary key is registered in the hidden field. You can check your code, if necessary, against journal_update_mysql01.php. Figure 13-4. An update form uses the primary key to retrieve and display a record ready for editing. 7. The name attribute of the submit button is update, so all the update processing code needs to go in a conditional statement that checks for the presence of update in the $_POST array. Place the code highlighted in bold just before the page redirect script: $row = mysql_fetch_assoc($result); } // if form has been submitted, update record if (array_key_exists(’update’, $_POST)) { // prepare expected items for insertion into database foreach ($_POST as $key => $value) { if (in_array($key, $expected)) { ${$key} = mysql_real_escape_string($value); } } // abandon the process if primary key invalid if (!is_numeric($article_id)) { die(’Invalid request’); } 363
Note: In case you are looking for affordable and reliable webhost to host and run your j2ee application check Vision J2ee Web Hosting services.

PHP SOLUTIONS: DYNAMIC WEB DESIGN MADE EASY (Best web hosting) The

humphreyblogart — Thu, 05 Jun 2008 11:21:00 +0000

PHP SOLUTIONS: DYNAMIC WEB DESIGN MADE EASY The final conditional statement redirects the page to journal_list.php if $article_id was set to NULL earlier. A variable that has been set to NULL is considered unset, so !isset($article_id) returns true if $article_id is NULL. 2. Now that you have retrieved the contents of the record, you need to display them in the update form by using PHP to populate the value attribute of each input field. Before doing so, it s a good idea to check that you actually have something to display. If someone changes the value of article_id in the query string, you may get an empty result set, so there is no point in going any further. Add the following conditional statement immediately before the opening

tag like this:

3. If $row isn t empty, you can display the results of the query without further testing. However, you need to pass text values to htmlentities() to avoid any problems with the display of quotes. Change the code in the title input field like this: Make sure there is no space between the opening and closing PHP and tags. Otherwise, you will get unwanted spaces in your updated record. 5. The UPDATE command needs to know the primary key of the record you want to change. Store the primary key in a hidden field so that it is submitted in the $_POST array with the other details. Because hidden fields are not displayed onscreen, the following code can go anywhere inside the form: <input name="article_id" type="hidden" value="<?php . echo $row['article_id']; ?>” /> 6. Save the update page, and test it by loading journal_list.php into a browser and selecting the EDIT link for one of the records. The contents of the record should be displayed in the form fields as shown in Figure 13-4. <br />Searching for affordable and proven webhost to host and run your servlet applications? Go to <a href="http://linux.b5websitehosting.com">Linux Web Hosting</a> services and you will find it. </p> </article> <article> <h1>MANAGING CONTENT // remove backslashes nukeMagicQuotes(); // initialize (Cpanel web hosting)</h1> <p>humphreyblogart — Wed, 04 Jun 2008 17:08:49 +0000</p> <p>MANAGING CONTENT // remove backslashes nukeMagicQuotes(); // initialize flag $done = false; // prepare an array of expected items $expected = array(’title’, ‘article’, ‘article_id’); // create database connection $conn = dbConnect(’admin’); // get details of selected record if ($_GET && !$_POST) { if (isset($_GET[’article_id’]) && is_numeric($_GET[’article_id’])) { $article_id = $_GET[’article_id’]; } else { $article_id = NULL; } if ($article_id) { $sql = “SELECT * FROM journal WHERE article_id = $article_id”; $result = mysql_query($sql) or die (mysql_error()); $row = mysql_fetch_assoc($result); } } // redirect page if $article_id is invalid if (!isset($article_id)) { header(’Location: http://localhost/phpsolutions/admin/ . journal_list.php’); exit; } ?> Although this is very similar to the code used for the insert page, the first few lines are outside the conditional statement. Both stages of the update process require the include files, the removal of backslashes, and the database connection, so this avoids the need to duplicate code. The $done flag is initialized as false and will be used later to test whether the update succeeded. There s an important addition to the $expected array. When a record is first inserted, the primary key is generated automatically by MySQL. However, when you update a record, you need its article_id to identify it. The first conditional statement checks that the $_GET array contains at least one value and that the $_POST array is empty. This makes sure that the code inside is executed only when the query string is set, but the form hasn t been submitted. Before building the SQL query, you need to check that $_GET[’article_id’] has been defined and pass it to is_numeric() to make sure that it contains only a number. If someone comes directly to this page or an attacker tries to pass anything else to your query, $article_id is set to NULL. If everything is OK, the SQL query is submitted. The result should contain only one record, so its contents are extracted straight away and stored in $row. 361 <br />Visit our <a href="http://mysql5.b5websitehosting.com">web design programs</a> services for an affordable and reliable webhost to suit all your needs. </p> </article> <article> <h1>PHP SOLUTIONS: DYNAMIC WEB DESIGN MADE EASY Updating (Web hosting ecommerce)</h1> <p>humphreyblogart — Tue, 03 Jun 2008 23:06:26 +0000</p> <p>PHP SOLUTIONS: DYNAMIC WEB DESIGN MADE EASY Updating records An update page needs to perform two separate processes, as follows: 1. Retrieve the selected record and display it ready for editing 2. Update the edited record in the database The first stage uses the primary key passed in the URL query string. So far, you have used SELECT to retrieve all records or a range of records (using LIMIT). To retrieve a specific record identified by its primary key, you add a WHERE clause to the end of the SELECT query like this: SELECT * FROM table_name WHERE primary_key_column = primary_key Whereas PHP uses two equal signs (==) to test for equality, MySQL uses only one (=). Don t get the two mixed up. After you have edited the record in the update page, you submit the form and pass all the details to an UPDATE command. The basic syntax of the SQL UPDATE command looks like this: UPDATE table_name SET column_name = value, column_name = value WHERE condition The condition when updating a specific record is the primary key. So, when updating article_id 2 in the journal table, the basic UPDATE query looks like this: UPDATE journal SET title = value, article = value WHERE article_id = 2 Although the basic principle is the same for each method of connecting to MySQL, the code differs sufficiently to warrant separate instructions. PHP Solution 13-5: Updating a record with the original MySQL extension Use journal_update01.php fromthe download files. The code for the first stage of the update process is in journal_update_mysql01php, and the final code is in journal_update_mysql02.php. 1. The first stage involves retrieving the details of the record that you want to update. Since the primary key is passed through the query string, you need to extract it from the $_GET array and make sure that it s safe to use before incorporating it into your SQL query. Put the following code above the DOCTYPE declaration: <?php include('../includes/conn_mysql.inc.php'); include('../includes/corefuncs.php'); <br />Please visit <a href="http://domain.b5websitehosting.com">Domain Name Hosting</a> services for high quality webhost to host and run your jsp applications. </p> </article> <article> <h1>MANAGING CONTENT For PDO, use this: This is (Medical web site)</h1> <p>humphreyblogart — Tue, 03 Jun 2008 07:12:09 +0000</p> <p>MANAGING CONTENT For PDO, use this: </tr> <p> <?php foreach ($conn->query($sql) as $row) { ?><br /> <tr> This is the same as in the previous chapter, so it should need no explanation. 4. Display the created and title fields for the current record in the first two cells of the second row like this: <td><?php echo $row['created']; ?></td> <td><?php echo $row['title']; ?></td> <p> 5. Add the query string and value of the article_id field for the current record to both URLs in the next two cells like this: <td><a href="journal_update.php?article_id=<?php echo . $row['article_id']; ?>“>EDIT</a></td> <td><a href="journal_delete.php?article_id=<?php echo . $row['article_id']; ?>“>DELETE</a></td> <p> What you re doing here is adding ?article_id= to the URL, and then using PHP to display the value of $row[’article_id’]. It s important that you don t leave any spaces that might break the URL or the query string. A common mistake is to leave spaces around the equal sign. After the PHP has been processed, the opening <a> tag should look like this (although the number will vary according to the record): <a href="journal_update.php?article_id=2"> 6. Finally, close the loop surrounding the second table row with a curly brace like this: </tr> <p> <?php } ?> </table> <p> 7. Save journal_list.php and load the page into a browser. Assuming that you loaded the contents of journal.sql into the phpsolutions database earlier, you should see a list of four items, as shown in Figure 13-3. You can now test journal_insert.php. After inserting an item, you should be returned to journal_list.php, and the date and time of creation, together with the title of the new item, should be displayed at the top of the list. Check your code against the download files if you encounter any problems. The code in journal_list.php assumes that there will always be some records in the table. As an exercise, use the technique in PHP Solution 11-2 (MySQL original and MySQLI), or 11-3 (PDO) to count the number of results, and use a conditional statement to display a suitable message if no records are found. The solution is in journal_list_norec_mysql.php, journal_list_norec_mysqli.php, and journal_list_norec_pdo.php. 13 359 <br />Visit our <a href="http://mysql5.b5websitehosting.com">web design programs</a> services for an affordable and reliable webhost to suit all your needs. </p> </article> <article> <h1>Shared web hosting - PHP SOLUTIONS: DYNAMIC WEB DESIGN MADE EASY EDIT</h1> <p>humphreyblogart — Mon, 02 Jun 2008 13:15:38 +0000</p> <p>PHP SOLUTIONS: DYNAMIC WEB DESIGN MADE EASY<br /> <tr> <td></td> <td></td> <td><a href="journal_update.php">EDIT</a></td> <td><a href="journal_delete.php">DELETE</a></td> </tr> </table> <p> PHP Solution 13-4: Creating the links to the update and delete pages Use journal_list01.php in the download files. Depending on the method used to connect to MySQL, the finished code is in journal_list_mysql.php, journal_list_mysqli.php, or journal_list_pdo.php. 1. You need to connect to MySQL and create the SQL query. Add the following code above the DOCTYPE declaration: <?php include('../includes/connection.inc.php'); // create database connection $conn = dbConnect('query'); $sql = 'SELECT * FROM journal ORDER BY created DESC'; ?> I have used the generic filename connection.inc.php. Make sure you use the correct connection file for whichever method you re using to connect to MySQL. 2. If you re using the original MySQL extension or MySQL Improved, you need to submit the query. If you re using PDO, you can skip straight to step 3. For the original MySQL extension, add the following line immediately before the closing PHP tag: $result = mysql_query($sql) or die(mysql_error()); For MySQL Improved, use this line instead: $result = $conn->query($sql) or die(mysqli_error()); 3. You now need to enclose the second table row in a loop and retrieve each record from the result set. The following code goes between the closing </tr> <p> tag of the first row and the opening<br /> <tr> tag of the second row. For the original MySQL extension, use this: </tr> <p> <?php while($row = mysql_fetch_assoc($result)) { ?><br /> <tr> For MySQL Improved, use this: </tr> <p> <?php while($row = $result->fetch_assoc()) { ?><br /> <tr>We recommend high quality webhost to host and run your jsp application: <a href="http://jsp.armadillowebhosting.com">christian web host</a> services. </p> </article> <article> <h1>MANAGING CONTENT To sort the results, add an (Unlimited web hosting)</h1> <p>humphreyblogart — Sun, 01 Jun 2008 21:17:24 +0000</p> <p>MANAGING CONTENT To sort the results, add an ORDER BY clause. This sorts the records in alphabetical order by title: SELECT * FROM journal ORDER BY title It s often convenient to display the most recent entry at the top of the list, so you can sort the results by the created column. To sort them in reverse (descending) order, add the DESC keyword like this: SELECT * FROM journal ORDER BY created DESC You can use the results of this query to display a list of all records, complete with links to the update and delete pages. By adding the value of article_id to a query string in each link, you automatically identify the record to be updated or deleted. As you can see in Figure 13-3, the URL displayed in the browser status bar (bottom left) identifies the article_id of the article Trainee geishas go shopping as 2. This is used by journal_update.php to display the correct record ready for updating. The same information is conveyed in the DELETE link to journal_delete.php. Figure 13-3. The EDIT and DELETE links contain the record s primary key in a query string. To create a list like this, you need to start with a table that contains two rows and as many columns as you want to display, plus two extra columns for the EDIT and DELETE links. The first row is used for column headings. The second row is wrapped in a PHP loop to display all the results. The table in journal_list.php starts off like this (it s in journal_list01.php in the download files):<br /> <table> <tr> <th scope="col">Created</th> <th scope="col">Title</th> <th> </th> <th> </th> </tr> <p> 357 <br />Looking for affordable and reliable webhost to host and run your business application? Then look no more and go to <a href="http://mysql5.jspwebsitehosting.com">servlet web hosting</a> services. </p> </article> <article> <h1>PHP SOLUTIONS: DYNAMIC WEB DESIGN MADE EASY 3. (Web server setup)</h1> <p>humphreyblogart — Sun, 01 Jun 2008 05:01:37 +0000</p> <p>PHP SOLUTIONS: DYNAMIC WEB DESIGN MADE EASY 3. The next stage is to initialize the prepared statement and bind the values from the variables to the placeholders a process known as binding the parameters. Add the following code: // prepare the statement $stmt = $conn->prepare($sql); // bind the parameters and execute the statement $stmt->bindParam(’:title’, $_POST[’title’], PDO::PARAM_STR); $stmt->bindParam(’:article’, $_POST[’article’], PDO::PARAM_STR); $OK = $stmt->execute(); This begins by passing the SQL query to the prepare() method of the database connection ($conn), and storing a reference to the statement as a variable ($stmt). Next, the values in the variables are bound to the placeholders in the SQL query. Because the previous step uses explicit names for the placeholders, you need to do this separately for each variable. The execute() method runs the query, and the success or failure of the operation is stored in $OK. 4. Finally, redirect the page to a list of existing records or display any error message. Add this code after the previous step: // redirect if successful or display error if ($OK) { header(’Location: http://localhost/phpsolutions/admin/ . journal_list.php’); exit; } else { $error = $stmt->errorInfo(); echo $error[2]; } } ?> Since the prepared statement has been stored as $stmt, you can access an array of error messages using $stmt->errorInfo(). The most useful information is stored in the third element of the array. That completes the insert page, but before testing it, create journal_list.php, which is described next. Linking to the update and delete pages Before you can update or delete a record, you need to find its primary key. A practical way of doing this is to display a list of all records. The following SQL query retrieves everything from the journal table: SELECT * FROM journal <br />We would like to recommend you tested and proved <a href="http://jboss.jspwebsitehosting.com">virtual web hosting</a> services, which you will surely find to be of great quality. </p> </article> </main></body></html>