公告：未定义的索引错误

-1

Notice: Undefined index: prospectname in C:\wamp\www\var\SAS\insert.php on line 12

下面是代码

<form action="#" method="POST" class='form-horizontal form-bordered'> 
    <div class="control-group"> 
     <label for="prospectname" class="control-label">Prospect Name</label> 
     <div class="controls"> 
      <input type="text" name="prospectname" id="prospectname" placeholder="prospectname" class="input-xlarge"> 
     </div> 
    </div> 
    <div class="control-group"> 
     <label for="status" class="control-label">Status</label> 
    </div> 
</form>

sas.js

$(".registeradd").click(function() { 

    var prospectname = $("#prospectname").val(); 
    var status = $("#status").val(); 
    var dataString = 'prospectname =' + prospectname + '&status=' + status; 

    if (prospectname == '') { 
     alert("Please Enter Some Text"); 
    } else { 
     $("#flash").show(); 
     $("#flash").fadeIn(400).html; 

     $.ajax({ 
      type: "POST", 
      url: "insert.php", 
      data: dataString, 
      cache: false, 
      success: function (html) { 
       $("#display").after(html); 
       $("#flash").hide(); 
      } 
     }); 
    } 
    return false; 
});

Insert.php

<?php 

$dbHost = 'localhost'; // usually localhost 
$dbUsername = 'root'; 
$dbPassword = ''; 
$dbDatabase = 'test'; 

$db = mysql_connect($dbHost, $dbUsername, $dbPassword) or die ("Unable to connect to Database Server."); 

mysql_select_db ($dbDatabase, $db) or die ("Could not select database."); 

$prospectname =$_POST['prospectname']; 
$status=$_POST['status']; 

$sql_insert="insert into salesactivity(prospectname,status) values '$prospectname','$status')"; 

print $sql_insert; 
mysql_query($sql_insert); 

?>

来源

2014-02-17 arok

您是vurnerable到[SQL注入]（http://en.wikipedia.org/wiki/SQL_injection）。你知道吗？ – George

更改datastring

var dataString = 'prospectname ='+ prospectname +'&status='+status;

到json object

var dataString = { 'prospectname': prospectname, 'status': status};

来源

2014-02-17 11:36:06

-1

我想你忘记你的形式状态文本字段添加它HTML表单上

replace your form with this 



    <form action="#" method="POST" class='form-horizontal form-bordered'> 
      <div class="control-group"> 
       <label for="prospectname" class="control-label">Prospect Name</label> 
       <div class="controls"> 
        <input type="text" name="prospectname" id="prospectname" placeholder="prospectname" class="input-xlarge"> 
       </div> 
      </div> 

       <div class="control-group"> 
       <label for="prospectname" class="control-label">Status</label> 
       <div class="controls"> 
        <input type="text" name="status" id="status" placeholder="status" class="input-xlarge"> 
       </div> 
      </div> 
     </form>

来源

2014-02-17 11:40:53 wild

公告：未定义的索引错误

回答

相关问题