Help with PHP MySQL alert if info is not in database

Stkr Dngr · Jan 23, 2018

I am developing a ship tracking website for a client and I was not the one that wrote the code from scratch, so the problem I am having with this is that when someone enters a wrong tracking number(a number that has not been registered in the database) it displays a shipment but with empty fields. I want it to tell the user that it could not find the tracking number or that the number does not exist in the database, instead of returning something empty. If maybe user mistakenly makes a typo it will display an empty track details and before user discovers that he made a mistake he would think the wrong number was sent to him, i want it to tell them that it is incorrect when they make a mistake. This is the code via pastebin https://pastebin.com/yzESZP4g .

knaitas · Jan 23, 2018

first do a select query and then check if any results were returned. If the query returned is empty it means that the shipment does not exist/ is wrong else show the shipment. Im on my phone so cannot really write the code

Sheepp · Jan 23, 2018

Oh my ..

NEVER, EVER, put this code in production as is ok ?

There are several security flaws (and i mean, enormous one) the first one being SQL injection.

I'd suggest you to google this and update your code, otherwise your database will be hacked in less than 2 secs

For your original question : as said above, this can easily be done by doing an empty comparison on the sql query result before displaying the actual data.

Something along (in rough pseudo code):
result =sqlQuery()
if (result == empty)
DisplayErrorMessage
Else
DisplayData

Stkr Dngr · Jan 24, 2018

RootSheep said:
Oh my ..

NEVER, EVER, put this code in production as is ok ?

There are several security flaws (and i mean, enormous one) the first one being SQL injection.

I'd suggest you to google this and update your code, otherwise your database will be hacked in less than 2 secs

For your original question : as said above, this can easily be done by doing an empty comparison on the sql query result before displaying the actual data.

Something along (in rough pseudo code):
result =sqlQuery()
if (result == empty)
DisplayErrorMessage
Else
DisplayData

that didn't work. If you can be a bit more precise.

About the exploit problem, goodluck to the dumb hacker that is looking for credit card details in the DB.

FaithlessDbo · Jan 24, 2018

Stkr Dngr said:
that didn't work. If you can be a bit more precise.

About the exploit problem, goodluck to the dumb hacker that is looking for credit card details in the DB.

It's not just that. He could drop your DB so all the stored data is gone. I would suggest for starters that you to put all the input settings into variables and then use the variables in your if then else statements.

Sheepp · Jan 24, 2018

Stkr Dngr said:
that didn't work. If you can be a bit more precise.

About the exploit problem, goodluck to the dumb hacker that is looking for credit card details in the DB.

What didn't work ? Post your code. Did you search on google ? I'm pretty sure you can find some similar code, as a database query is very common

The "hacker" might not be looking for credit cards. In fact here the hole is so big that even a 12 year old could rape and delete your site database with a free automated tool, and not to get CC's but just to feel powerful

Stkr Dngr · Jan 24, 2018

RootSheep said:
Post your code

https://pastebin.com/yzESZP4g

rimvy · Jan 24, 2018

PHP:

if (mysql_num_rows($Result) == 0) {
   //results are empty, do something here
} else {
     //processing when you have some data
}

One of solutions is to check if any rows is returned.

mainceaft · Sep 30, 2018

Here is your code :-

Code:

<body bgcolor="#c0392b">
if (   empty ( $row_Recordset1 )  {
echo '<div>
You entered wrong Tracking  number 
  </div>'
}

This is complete file

https://pastebin.com/mtL6dd8P

Help with PHP MySQL alert if info is not in database

Stkr Dngr

Regular Member

knaitas

BANNED

Sheepp

Senior Member

Stkr Dngr

Regular Member

FaithlessDbo

Regular Member

Sheepp

Senior Member

Stkr Dngr

Regular Member

rimvy

Regular Member

mainceaft

Senior Member

Main Menu

Marketplace

Making Money

BlackHat World