JavaScript/MySQL question (sorry 'bout that)

My guess is that there are others viewing this that are seasoned PHPmongers. I am a PHP noob. However, if you fail to get a solution, I may be of some help. After all, coding is coding, yes? If that is the case, go to tj49.com click the contact tab and send me your email or phone number or other method of contact. I wouldn't recommend that you post any of your contact info in this site as it is probably pretty public.

Having said that I bet that the drupal veterans in the group can help you, if their not out having too much fun this weekend...

regards
tim

Drupal Noob (since 2012)
Coder since 1987 - Web Coder since 1996
akwebsoft.com - tj49.com

Weekend...? I've heard that term. Not sure what it is exactly.

I googled it. Actually, I

Do a quick diff on the 2013 and 2014 files to makes sure all the lines you change are actually what you want to change (helps you verify you didn't turn "%2013%" into "2014%". You can do this with linux tools like diff http://linux.about.com/library/cmd/blcmdl1_diff.htm
or use an online version http://www.diffchecker.com/
oorrr if you manage your code with git use "git diff [commmit hash before edits]"

Could we also see your PHP error log to see if there are any errors?

As for lines 519-525 and so on, those lines are actually Javascript, this file is pretty messy confusing.

Also there is a HUGE issue I see here..

The code uses mysql_query to insert POST data directly into the database at lines 39-40 without sanitizing it. This could easily result it someone dropping all of your tables, inserting data into other tables, malforming data, etc.

Here is a quick little article on it. http://www.dreamhost.com/dreamscape/2013/05/29/part-2-of-php-security-us...

Where I would start is making sure all of the queries at the top are actually returning data. If that is true than work your way though everything else. When I debug on weird issues I just start at the source until something stops me.

Hope this helps.

I double checked and the only

Update: I have pinpointed the problem...sorta. I still need some help from someone knowledgeable in JS.

The change of date from 2013 to 2014 appears to me to be a red herring since all that was being done with the date was pulling values from the database and stuffing them into a arrays ($event_query, $evt_result, $evt_result1) for the purpose of creating the options presented in the form. The JS then evaluates and validates the form options to ensure that all the required information is present before sending the information via email.

The validation is failing here:

 var total=0;
 for(var i=0;i<frm.chk_event_select.length;i++){
 if(frm.chk_event_select[i].checked) {
 total++;
 }
 }
 if( total == 0 ) {
 str+="Select Any one Event.\n";
 }
 zip_val=new Array();
 event_val=new Array();
 for(var i=0;i<frm.chk_event_select.length;i++){
 if(frm.chk_event_select[i].checked==true) {
 zip_val[i]=frm.chk_event_select[i].value;
 event_val[i]=frm.hidden_name[i].value;
 }
 else{
 zip_val[i]="";
 event_val[i]="";
 }
 }
 for(k=0;k<zip_val.length;k++){
 if(zip_val[k]!=""){
 if($('#sel_sponsor_'+zip_val[k]).val()=="")
 {
 str+=event_val[k]+" Select Your Sponsorship.\n";
 }
 if($('#sel_booths_'+zip_val[k]).val()=="")
 {
 str+=event_val[k]+" Number of Booths.\n";
 }
 }
 }

This is supposed to get a value from the form:

But it isn't. Just don't know why since the same code worked fine before. I do know two additional details:

If I change :

 if( total == 0 ) {
 str+="Select Any one Event.\n";

to:

 if( total == 0 ) {
 alert(frm.hk_event_select.length)
 str+="Select Any one Event.\n";

I get an undefined error in the alert and the submission fails.

If I change it to:

 if( total == 0 ) {
 alert(chk_event_select.length)
 str+="Select Any one Event.\n";

submission goes through but then the validation fails to block the submission when none of the required event options on the form are selected.

???????

Got some help from a (sorta) former schoolmate. Turns out (at least as I understand him) that JS has a quirk: an array with only one value in it is NOT treated as an array. :(

Awesome that you were able to

I haven't been following this thread since Brandon jumped in on the PHP issues, and didn't take the time to analyze the javascript, which I know a little about. I took the plunge a couple of years ago and started migrating all of my javascript code to be JSLint compliant. I hated it at first because JSLint is very picky and may seen unnecessarily, but I have been happy with the results. Unfortunately, I don't think that JSLint catches all of the Internet Explorer "gotchas", but it does catch unintentional global variables - which has created real headaches for me in the past. Example

Drupal Noob (since 2012)
Coder since 1987 - Web Coder since 1996
akwebsoft.com - tj49.com

• tehbmar
• liketehcold
• Loyer
• mboas
• operadix

• Arabic
• Alappuzha
• Event Platform
• Western Ohio User Group
• Goa Drupal Community
• Liverpool
• Chandigarh Drupal Geeks (C.D.G.)
• API-First Working Group
• Compony opinionated developers
• 4SPOTS