mysql - PHP SQL QUERY - Filtering with Query, multiple values for item -


i have been learning php/mysql time, have not learned much, focusing on iphone development tackling full time job well.

i building mesaging client, using json pull new messages , chat windows.... part having ap roblem getting information database. loking in request messages betwen people (ie: fromuser , touser) , display them in json, cannot display in json reason.

here example

<?php   $enduser = $_get['usernameto']; $enduser1 = $_get['usernamefrom']; $db = mydatabase; $con = mysql_connect("localhost","admin","password"); if (!$con)   {    die('could not connect: ' . mysql_error());   } mysql_select_db($db, $con);    $arr = array();        //execute query       $rs = mysql_query("select * messages touser = '$enduser' , fromuser = '$enduser1'");         $rs1 = mysql_query("select * messages touser = '$enduser1' , fromuser = '$enduser'");          // add rows array         while($obj = mysql_fetch_object($rs)) {         $arr = $obj;         }       // add rows array     while($obj1 = mysql_fetch_object($rs1)) {    $arr1 = $obj1;    }    echo '{"users":'.json_encode($arr).' '.json_encode($arr1).'}'; // echo ''.json_encode($arr).''; mysql_close($con); ?>

now show messages example fromuser= user1 touser= user2 , shows fromuser= user2 , touser = user1. in 2 seperate json lists, them pulled on 1 simple json list, if can done, amazing, know must lay in query section...

i know tons of vulnerabilities , issues code not "clean" time been doesn't need follow methods, until go , learn how follow sqli , real escape strings/injections....

thanks :-)

the comment learning sql injection correct able messages in 1 query:

select * messages (touser = '$enduser' , fromuser = '$enduser1') or (touser = '$enduser1' , fromuser = '$enduser')

this should select looking for.


Comments

Post a Comment

Popular posts from this blog

ios - iPhone/iPad different view orientations in different views , and apple approval process -

i force app's home screen portrait , other views landscape. apple rejects app if this? if not , how force first screen launch in portrait mode? , force other screens launch in landscape. this not duplicate question search every possible answer in website. i force app's home screen portrait , other views landscape. apple rejects app if this? no apple not reject app this. have lot of apps doesn't support orientation. forcing on 1 screen won't cause app reject. if not , how force first screen launch in portrait mode? , force other screens launch in landscape. can on write : -(nsuinteger)supportedinterfaceorientations; function.
Read more

java Extracting Zip file -

i'm looking way extract zip file. far have tried java.util.zip , org.apache.commons.compress, both gave corrupted output. basically, input zip file contain 1 single .doc file. java.util.zip: output corrupted. org.apache.commons.compress: output blank file, 2 mb size. so far commercial software winrar work perfectly. there java library make use of this? this method using java.util library: public void extractzipnative(file filezip) { zipinputstream zis; stringbuilder sb; try { zis = new zipinputstream(new fileinputstream(filezip)); zipentry ze = zis.getnextentry(); byte[] buffer = new byte[(int) ze.getsize()]; fileoutputstream fos = new fileoutputstream(this.tempfolderpath+ze.getname()); int len; while ((len=zis.read(buffer))>0) { fos.write(buffer); } fos.flush(); fos.close(); } catch (filenotfoundexception e) { // todo auto-generated catch block ...
Read more

C# WinForm - loading screen -

i ask how make loading screen (just picture or something) appears while program being loaded, , disappears when program has finished loading. in fancier versions, have seen process bar (%) displayed. how can have that, , how calculate % show on it? i know there form_load() event, not see form_loaded() event, or % property / attribute anywhere. all need create 1 form splash screen , show before main start showing landing page , close splash once landing page loaded. class splashform { //delegate cross thread call close private delegate void closedelegate(); //the type of form displayed splash screen. private static splashform splashform; static public void showsplashscreen() { // make sure launched once. if (splashform != null) return; thread thread = new thread(new threadstart(splashform.showform)); thread.isbackground = true; thread.setapartmentstate(apartmentstate.sta); thread....
Read more