Forum PHP.pl

Mam taki kod:

[PHP] pobierz, plaintext 
<?php
include ("header.php");
	error_reporting(E_ALL | E_STRICT | E_NOTICE);
ini_set("display_errors", "1");
$news_id = $_GET['news_id'];
$query = mysqli_query ($connect, "SELECT `news_id`, `news_subject`, `news_image`, `news_cat`, `news_desc` FROM news WHERE news_id=".$_GET['news_id']."") or die ("<p class='blad'>Wystąpił błąd podczas pobierania wpisów z bazy.</p> ".mysqli_connect_error()."");
 
$news = mysqli_fetch_array($query);
$news_subject = htmlspecialchars ($news['news_subject']);
$news_image = htmlspecialchars ($news['news_image']);
$news_cat = htmlspecialchars ($news['news_cat']);
$news_desc = htmlspecialchars ($news['news_desc']);
 
echo "<form name='add_news' action='news.php?news_id=".$news_id."' method='post'>
					<div class='box'>
						<h1>Dodaj newsa</h1>
						<label>
						<span>Tytuł :</span>
						<input type='text' class='wpis' name='news_subject' id='' value='".$news_subject."'/>
						</label>
						<label>
						<span>Okładka :</span>
						<input type='text' class='wpis' name='news_image' id='' value='".$news_image."'/>
						</label>
						<label>
						<span>Kategoria :</span>
						<input type='radio' class='wpis' name='' id=''/>
						<input type='radio' class='wpis' name='' id=''/>
						<input type='radio' class='wpis' name='' id=''/>
						<input type='radio' class='wpis' name='' id=''/>
						</label>
						<label>
						<span>Treść :</span>
						<textarea class='wiadomosc' name='news_desc' id=''>".stripslashes($news_desc)."</textarea>
						<input type='submit' class='button' value='Wyślij'/>
						</label>
					</div>
 
 
				</form>";
				if (!empty($_POST)) {
					 $_toDB['news_subject']= mysqli_real_escape_string ($connect, $_POST['news_subject']);
				 $_toDB['news_image']= mysqli_real_escape_string ($connect, $_POST['news_image']);
				 $_toDB['news_cat']= mysqli_real_escape_string ($connect, $_POST['news_cat']);
				 $_toDB['news_desc']= mysqli_real_escape_string ($connect, $_POST['news_desc']);
				mysqli_query($connect, "UPDATE news SET news_subject = ".$_toDB['news_subject'].", news_image = ".$_toDB['news_image'].", news_cat = ".$_toDB['news_cat'].", news_desc = ".$_toDB['news_desc']." WHERE news_id = ".$news_id."");
					}
					var_dump($_POST);
 
 
 
 
include("footer.php");
?>
[PHP] pobierz, plaintext 

Powinien on aktualizować dane z formularza jednakże tak się nie dzieje. Co jest nie tak?

Ten post edytował krzywy853 31.10.2013, 20:39:08

Do wstawiania kodu PHP służy tag [ php ].

Pierwsze co widzę, to że w zapytaniu masz łańcuchy znaków luzem, a nie w apostrofach.

Nic to nie dało

białe znaki po mysqli_real_escape_string