Save and update records in many tabs on one page in php

Question

Sophia_1 0 Junior Poster in Training

11 Years Ago

Hi, i have 2 tabs in one form. After inserting records in tabs-1 for quarter 1 progress, user then updates records in tabs-2 for quarter 2 progress, which is of the same row in the progress table. However when i click submit button or update button, no records are being saved or updated. Below are the codes. Please advise. Thanks.

<!doctype html>
<html lang="en">
<head>
<link rel="stylesheet" type="text/css" href="style.css"/>
<style>
div.savestatus{ /* Style for the "Saving Form Contents" DIV that is shown at the top of the form */
width:200px;
padding:2px 5px;
border:1px solid gray;
background:#fff6e5;
-webkit-box-shadow: 0 0 8px #818181;
box-shadow: 0 0 8px #818181;
-moz-border-radius: 5px;
-webkit-border-radius: 5px;
border-radius:5px;
color:red;
position:absolute;
top:-10px;
}
form#feedbackform div{ /*CSS used by demo form*/
margin-bottom:9px;
}
</style>
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js"></script>
<script src="autosaveform.js">
/***********************************************
* Auto Save Form script (c) Dynamic Drive (www.dynamicdrive.com)
* This notice MUST stay intact for legal use
* Visit http://www.dynamicdrive.com/ for this script and 100s more.
***********************************************/

</script>
<script>
var formsave1=new autosaveform({
    formid: 'ipdprogress',
    pause: 1000 //<--no comma following last option!
})
</script>
  <meta charset="utf-8">
  <title>Institutional Performance Data System Database</title>
  <link rel="stylesheet" href="//code.jquery.com/ui/1.11.2/themes/smoothness/jquery-ui.css">
  <script src="//code.jquery.com/jquery-1.10.2.js"></script>
  <script src="//code.jquery.com/ui/1.11.2/jquery-ui.js"></script>
  <link rel="stylesheet" href="/resources/demos/style.css">
<script>
  $(function() {
    $( "#tabs" ).tabs();
  });
</script>
</head>
<body>
<div id="header" > 
<h1><b>SECTION II: Progress</b></h1>
<?php 
session_start(); 
error_reporting(E_ALL ^ E_NOTICE);
    $_SESSION['Userid']; // it will print the userid value
    $_SESSION['Username']; // it will print the userid value
    $_SESSION['Email'];

$connection = mysql_connect("localhost","user","") or die("Database connection failed!<br>");
$result=mysql_select_db("p") or die("Database could not be selected!");
    $Picid=0;
    if (isset($_GET['Picid'])) {
    $_SESSION['Picid']=$_GET['Picid'];  
    $Picid=$_SESSION['Picid'];  

$query="Select Userid,Picid from general_ipd where Userid='".$_SESSION['Userid']."' and Picid= '".$Picid."'";
$result=mysql_query($query)or die(mysql_error());
if($row=mysql_fetch_array($result))
{
echo "<input type='hidden' name='hidden' value='".$row['Userid']."'><br>";
echo "<input type='hidden' name='hidden' value='".$Picid."'><br>";
}
}
?> 
</div>
<div id="tabs">
  <ul>
    <li><a href="#tabs-1">Quarter 1</a></li>
    <li><a href="#tabs-2">Quarter 2</a></li>
  </ul>

<?php
session_start(); 
error_reporting(E_ALL ^ E_NOTICE);
$con = mysql_connect("localhost","user","");
if (!$con){
die("Can not connect: " . mysql_error());
}
mysql_select_db("p",$con);
if(isset($_POST['submit'])){
mysql_query("INSERT INTO progress (Quanprogress1, Qualprogress1,Picid) VALUES ('" . $_POST["Quanprogress1"] . "','" . $_POST["Qualprogress1"] . "','" . $Picid . "')"); 
$Progressid = mysql_insert_id();
$_SESSION['Progressid']=$Progressid;
if(!empty($Progressid)) {   
$message = "New progress added successfully"; 
}
} 
?>
<form id="ipdprogress" method="post" action="">

<div id="tabs-1">  
<p><b>1.Target</b></p>
<Table> 
<tr>
<td><font size=2>a.i.Quantitative Progress (e.g. average,numerical,%,sum):</font></td>
<td><input type="text" name="Quanprogress1" class="txtField" value="<?php echo $row['Quanprogress1']; ?>"></td>
<td><font size=2>a.ii.Qualitative Progress: </font></td>
<td><input type="text" name="Qualprogress1" class="txtField" value="<?php echo $row['Qualprogress1']; ?>"></td>
</tr>
</table>   
<input type="hidden" name="Picid"> 
<input type="hidden" name="Progressid">    
</div>
<div id="tabs-2">
<?php
session_start(); 
error_reporting(E_ALL ^ E_NOTICE);
$conn = mysql_connect("localhost","user","");
mysql_select_db("p",$conn);
if(isset($_POST['update'])){
mysql_query("UPDATE progress set Quanprogress2='" . $_POST["Quanprogress2"] . "', Qualprogress2='" . $_POST["Qualprogress2"] . "' WHERE Picid='" . $Picid . "' and Progressid='" . $Progressid . "'");
$message = "Record Modified Successfully";
}
$result = mysql_query("SELECT * FROM progress WHERE  Picid='" . $Picid . "' and Progressid='" . $Progressid . "'");
$row= mysql_fetch_array($result);
?> 
<p><b>1.Target</b></p>
<table>
<tr><td><font size=2>a.i.Quantitative Progress (e.g. average,numerical,%,sum):</font></td>
<input type="hidden" name="Picid"> 
<input type="hidden" name="Progressid" class="txtField" value="<?php echo $row['Progressid']; ?>">
<td><input type="text" name="Quanprogress2" class="txtField" value="<?php echo $row['Quanprogress2']; ?>"></td>
<td><font size=2>a.ii.Qualitative Progress:</font></td>
<td><input type="text" name="Qualprogress2" class="txtField" value="<?php echo $row['Qualprogress2']; ?>"></td>
</tr>
</table>
<input type="hidden" name="Picid" > 
?>
</div>  
</div>
</div> 
</body>
<br>
<td colspan="2"><input type="submit" name="submit" value="Submit" class="btnSubmit"></td>
<td colspan="2"><input type="submit" name="update" value="Update" class="btnSubmit"></td>
</form></html>

javascript:jquery php

2 Contributors
3 Replies
236 Views
1 Day Discussion Span
Latest Post 11 Years Ago Latest Post by Member #120589

Dani AI

Generated 7 Months Ago

A few focused fixes will get this working. The most likely causes are (1) your update code never receives a valid Progressid/Picid because the hidden inputs have no values or the value comes only from an insert that never persisted to the form, (2) the submit/update controls and form tags are malformed (inputs appear after the closing tags), and (3) silent failures from the old mysql* calls and no error checking. already flagged the deprecated mysql* and the injection risk — replace them with PDO or mysqli and prepared statements, and enable error reporting while debugging.

Checklist and order of changes to apply

Call session_start() once at the top and handle POST logic before any HTML output.
After a successful INSERT, capture the new id (PDO::lastInsertId or mysqli_insert_id) and write it into a hidden field so later updates know which row to modify.
Always output the hidden fields with values: <input type="hidden" name="Picid" value="<?=htmlspecialchars($picid)?>"> and the same for Progressid.
Put both submit buttons inside the single <form> (and close the form properly before </body>). If you want separate operations, keep the same form and detect which button was pressed via isset($_POST['submit']) vs isset($_POST['update']).
Remove duplicate jQuery includes and check that any autosave script isn’t submitting empty/partial data or conflicting with tabs.

Minimal example (server-side handling pattern)

<?php
session_start();
$pdo = new PDO(..., [PDO::ATTR_ERRMODE=>PDO::ERRMODE_EXCEPTION]);
$picid = $_POST['Picid'] ?? $_GET['Picid'] ?? null;
$progressid = $_POST['Progressid'] ?? null;

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
  if (isset($_POST['submit'])) {
    $stmt = $pdo->prepare('INSERT INTO progress (Quanprogress1,Qualprogress1,Picid) VALUES (?,?,?)');
    $stmt->execute([$_POST['Quanprogress1'],$_POST['Qualprogress1'],$picid]);
    $progressid = $pdo->lastInsertId();
  } elseif (isset($_POST['update'])) {
    $stmt = $pdo->prepare('UPDATE progress SET Quanprogress2=?,Qualprogress2=? WHERE Progressid=? AND Picid=?');
    $stmt->execute([$_POST['Quanprogress2'],$_POST['Qualprogress2'],$progressid,$picid]);
  }
}
?>

Debugging tips: temporarily enable error_reporting(E_ALL) and display_errors, var_dump($_POST) to confirm fields, and check the database driver's error messages. If autosave/ajax is in use, disable it while verifying basic form flow. These steps address the common gaps seen in ’s thread (missing hidden values, form structure, and deprecated DB calls).

All 3 Replies

Member #120589

11 Years Ago

Urgh. Have you heard of indenting? That is nigh on impossible for me to read.

I did notice that your PHP and markup seem to comme from last century. mysql_* functions, font tags?? More html after the end body tag.

You're also wide open to SQL injection as you do not sanitize anything before stuffing it into your SQL statement.

Reply to this topic

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.

Sophia_1 0 Junior Poster in Training · Answer 1 · 2015-05-07T01:46:26+00:00

Hi, have indented the code below. But am not sure how to sanitize the code. Please kindly advise. Thanks.

<!doctype html>
<html lang="en">
<head>
<link rel="stylesheet" type="text/css" href="style.css"/>
<style>
div.savestatus{ /* Style for the "Saving Form Contents" DIV that is shown at the top of the form */
width:200px;
padding:2px 5px;
border:1px solid gray;
background:#fff6e5;
-webkit-box-shadow: 0 0 8px #818181;
box-shadow: 0 0 8px #818181;
-moz-border-radius: 5px;
-webkit-border-radius: 5px;
border-radius:5px;
color:red;
position:absolute;
top:-10px;
}
form#feedbackform div{ /*CSS used by demo form*/
margin-bottom:9px;
}
</style>
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js"></script>
<script src="autosaveform.js">
/***********************************************
* Auto Save Form script (c) Dynamic Drive (www.dynamicdrive.com)
* This notice MUST stay intact for legal use
* Visit http://www.dynamicdrive.com/ for this script and 100s more.
***********************************************/
</script>
<script>
var formsave1=new autosaveform({
    formid: 'ipdprogress',
    pause: 1000 //<--no comma following last option!
})
</script>
  <meta charset="utf-8">
  <title>Institutional Performance Data System Database</title>
  <link rel="stylesheet" href="//code.jquery.com/ui/1.11.2/themes/smoothness/jquery-ui.css">
  <script src="//code.jquery.com/jquery-1.10.2.js"></script>
  <script src="//code.jquery.com/ui/1.11.2/jquery-ui.js"></script>
  <link rel="stylesheet" href="/resources/demos/style.css">
<script>
  $(function() {
    $( "#tabs" ).tabs();
  });
</script>
</head>
<body>
<div id="header" > 
<h1><b>SECTION II: Progress</b></h1>
<?php 
session_start(); 
error_reporting(E_ALL ^ E_NOTICE);
    $_SESSION['Userid']; // it will print the userid value
    $_SESSION['Username']; // it will print the userid value
    $_SESSION['Email'];
$connection = mysql_connect("localhost","user","") or die("Database connection failed!<br>");
$result=mysql_select_db("p") or die("Database could not be selected!");
    $Picid=0;
    if (isset($_GET['Picid'])) {
        $_SESSION['Picid']=$_GET['Picid'];  
        $Picid=$_SESSION['Picid'];  
        $query="Select Userid,Picid from general_ipd where       Userid='".$_SESSION['Userid']."' and Picid= '".$Picid."'";
        $result=mysql_query($query)or die(mysql_error());
            if($row=mysql_fetch_array($result)){
                   echo "<input type='hidden' name='hidden' value='".$row['Userid']."'><br>";
                   echo "<input type='hidden' name='hidden' value='".$Picid."'><br>";
            }
    }
?> 
</div>
<div id="tabs">
  <ul>
    <li><a href="#tabs-1">Quarter 1</a></li>
    <li><a href="#tabs-2">Quarter 2</a></li>
  </ul>
<?php
session_start(); 
error_reporting(E_ALL ^ E_NOTICE);
$con = mysql_connect("localhost","user","");
    if (!$con){
    die("Can not connect: " . mysql_error());
    }
    mysql_select_db("p",$con);
        if(isset($_POST['submit'])){
        mysql_query("INSERT INTO progress (Quanprogress1, Qualprogress1,Picid) VALUES ('" . $_POST["Quanprogress1"] . "','" . $_POST["Qualprogress1"] . "','" . $Picid . "')"); 
        $Progressid = mysql_insert_id();
        $_SESSION['Progressid']=$Progressid;
            if(!empty($Progressid)) {   
                $message = "New progress added successfully"; 
            }
        } 
?>
<form id="ipdprogress" method="post" action="">
<div id="tabs-1">  
    <p><b>1.Target</b></p>
    <Table> 
        <tr>
           <td><font size=2>a.i.Quantitative Progress (e.g. average,numerical,%,sum):</font></td>
           <td><input type="text" name="Quanprogress1" class="txtField" value="<?php echo $row['Quanprogress1']; ?>"></td>
            <td><font size=2>a.ii.Qualitative Progress: </font></td>
             <td><input type="text" name="Qualprogress1" class="txtField" value="<?php echo $row['Qualprogress1']; ?>"></td>
        </tr>
    </table>   
    <input type="hidden" name="Picid"> 
    <input type="hidden" name="Progressid">    
</div>
<div id="tabs-2">
<?php
session_start(); 
error_reporting(E_ALL ^ E_NOTICE);
$conn = mysql_connect("localhost","user","");
mysql_select_db("p",$conn);
    if(isset($_POST['update'])){
        mysql_query("UPDATE progress set Quanprogress2='" . $_POST["Quanprogress2"] . "', Qualprogress2='" . $_POST["Qualprogress2"] . "' WHERE Picid='" . $Picid . "' and Progressid='" . $Progressid . "'");
        $message = "Record Modified Successfully";
    }
    $result = mysql_query("SELECT * FROM progress WHERE  Picid='" . $Picid . "' and Progressid='" . $Progressid . "'");
$row= mysql_fetch_array($result);
?> 
<p><b>1.Target</b></p>
    <table>
       <tr><td><font size=2>a.i.Quantitative Progress (e.g. average,numerical,%,sum):</font></td>
        <input type="hidden" name="Picid"> 
        <input type="hidden" name="Progressid" class="txtField" value="<?php echo $row['Progressid']; ?>">
            <td><input type="text" name="Quanprogress2" class="txtField" value="<?php echo $row['Quanprogress2']; ?>"></td>
            <td><font size=2>a.ii.Qualitative Progress:</font></td>
            <td><input type="text" name="Qualprogress2" class="txtField" value="<?php echo $row['Qualprogress2']; ?>"></td>
        </tr>
    </table>
<input type="hidden" name="Picid" > 
?>
</div>  
</div>
</div> 
</body>
<br>
            <td colspan="2"><input type="submit" name="submit" value="Submit" class="btnSubmit"></td>
            <td colspan="2"><input type="submit" name="update" value="Update" class="btnSubmit"></td>
</form></html>

Member #120589 · Answer 2 · 2015-05-07T07:21:58+00:00

Go to the php manual and search sanitize. Or search sanitize MySQL php in Google. Easy

Save and update records in many tabs on one page in php

Dani AI

Recommended Answers Collapse Answers

All 3 Replies

Recommended Answers