2017-03-04 90 views
0

不通过此代码。我有一个模式,其中有一个提交按钮,每次我必须点击提交按钮时,没有任何操作或者将其插入到数据库中。我有相同的代码在相同的文件,具有相同的功能,但另一个工程。所以数据库插入不是问题。

//REJECTED PROJECT & CHECKING FOR REASON 
if(isset($_POST['rejectSeed'])){ 
    echo "HUY"; 
     $query3="UPDATE projects 
     SET project_status = '7', reason = '".$_POST['reasonSeed']."' 
     WHERE id =".$idProj."";  

     retrieveTable($query3); 
     header('Location: listprojectsprojectproposal.php'); 
} 

enter image description here

echo " 
<div class='modal fade' id='modalRejectSeed' role='dialog'> 
    <div class='modal-dialog modal-lg'> 
     <div class='modal-content'> 
     <div class='modal-header'> 
      <button type='button' class='close' data-dismiss='modal'>&times;</button> 
      <h4 class='modal-title'>Reject ".$strings["project"].": ".$projectDetail->pro_name[0]."</h4> 
     </div> 
     <div class='modal-body'> 
      <h5>Please state the reason why Seed Company rejected the project ".$projectDetail->pro_name[0].". (eg. Insufficient)</h5> 

      <div class='input-group'> 
       <span class='input-group-addon' id='basic-addon1' style='width:500px;'>Reason for Rejection:</span> 
       <input type='text' id='reasonSeed' name='reasonSeed' class='form-control' style='width:500px;' placeholder='' aria-describedby='basic-addon1'> 
      </div> 

     </div> 
     <div class='modal-footer'> 
      <input type='submit' id='rejectSeed' class='btn btn-primary' name='rejectSeed'> 
     </div> 
     </div> 
    </div> 
    </div> 

    "; 
+0

添加一个表单标签你打开自己高达大规模XSS和SQL注入攻击。您需要将数据转换为HTML并使用参数化的SQL查询。 –

+0

如果你曾经尝试'var_dump($ _ POST)',你会看到'rejectSeed'不存在。哦,显然这个代码没有在'

'里面,所以你提交什么? – Xorifelse

+0

@Xorifelse嗨,方法$ _POST位于与下面写的代码相同的文件。我是否还需要将它放入表单中? –

回答

1

你必须在你的模型

<form action="" method="post"> 
<div class='modal fade' id='modalRejectSeed' role='dialog'> 
<div class='modal-dialog modal-lg'> 
    <div class='modal-content'> 
    <div class='modal-header'> 
     <button type='button' class='close' data-dismiss='modal'>&times;</button> 
     <h4 class='modal-title'>Reject ".$strings["project"].": ".$projectDetail->pro_name[0]."</h4> 
    </div> 
    <div class='modal-body'> 
     <h5>Please state the reason why Seed Company rejected the project ".$projectDetail->pro_name[0].". (eg. Insufficient)</h5> 

     <div class='input-group'> 
      <span class='input-group-addon' id='basic-addon1' style='width:500px;'>Reason for Rejection:</span> 
      <input type='text' id='reasonSeed' name='reasonSeed' class='form-control' style='width:500px;' placeholder='' aria-describedby='basic-addon1'> 
     </div> 

    </div> 
    <div class='modal-footer'> 
     <input type='submit' id='rejectSeed' class='btn btn-primary' name='rejectSeed'> 
    </div> 
    </div> 
</div> 
</div> 
</form> 
+0

不知道提交表单需要提交。你的回答确实有帮助。 –