POST data not sending

Question

UPDATE Added all the code for the img upload as well as adding to the DB. The output of print_r($_POST); :Array ( [prodName] => Test Product [prodPrice] => 100 [prodDescript] => Test description [submit] => UPLOAD ) Also the prodID col is auto increment.

Building off an image uploader you all so graciously helped me with, I am now trying to get the rest of this form to work. I am sending the data via POST but none of the info is being sent. I have verified the images upload, via the $_FILES array, but nothing is coming through in the $_POST data

I know my hosting service allows $_POST because I have another form that works perfectly with it. I cannot get to seem to get any errors to point me in the right direction. So once again. I come to you wonderful people.

<form action="inventory_add.php" method="POST" enctype="multipart/form-data">
    <label>Product Name: </label>
    <input type="text" name="prodName" id="prodName">
    <br>
    <label>Product Price: </label>
    <input type="text" name="prodPrice" id="prodPrice">
    <br>
    <label>Product Description</label><br>
    <textarea name="prodDescript" width="200px" id="prodDescript"></textarea>
    <br>
    Select Image Files to Upload:
    <br>
    <input type="file" name="upload[]" multiple >
    <input type="submit" name="submit" value="UPLOAD">
</form>

Some of the code from inventory_add.php:

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    $servername = "**********";
    $username = "**********";
    $password = "***********";
    $dbname = "************";

    $prod_name = $_POST['prodName'];
    $prod_price = $_POST['prodPrice'];
    $prod_descript = $_POST['prodDescript'];
    print_r($_POST);
    // Create connection
    $conn = new mysqli($servername, $username, $password, $dbname);
    // Check connection
    if ($conn->connect_error) {
        die("Connection failed: " . $conn->connect_error);
    } else {
        if(isset($_FILES['upload'])){
            $total = count($_FILES['upload']['name']);
            for( $i=0 ; $i < $total ; $i++ ) {
                $tmpFilePath = $_FILES['upload']['tmp_name'][$i];
                if ($tmpFilePath != ""){
                    $newFilePath = "images/prod/" . $_FILES['upload']['name'][$i];
                    if(move_uploaded_file($tmpFilePath, $newFilePath)) {
                        $img_names = implode(",",$_FILES['upload']['name']);

                    }
                }
            }
            $prodID = $_SESSION['curcount'] + 1;
            $sql = "INSERT INTO `inventory` (`prodId`, `prodTitle`, `prodDescript`, `prodCost`, `prodImages`) VALUES (' '," . $prod_name. "," . $prod_descript . "," . $prod_price ."," .$img_names.")";
            if ($conn->query($sql) === TRUE) {;
                 //   header('location:http://nerdsforhire.pnd-productions.com/shopmgr.php');
            } else {
                    echo 'There was an issue adding this item.';
            };
        }
    }
} else {
    echo "Failed";
}

Would hope this would update the database... yet it is not. I keep getting "There was an issue adding this item."

Answer 1

UPDATE based on our conversation below, and the code above, I think the issue is in your SQL not your PHP. I suggest adding mariadb to your question.

$conn = new mysqli($servername, $username, $password, $dbname);
$sql = 'INSERT INTO `inventory` ( `prodTitle`, `prodDescript`, `prodCost`, `prodImages`) VALUES (?,?,?,?)' ;
$stmt = $conn->prepare($sql)
$stmt->bind_param("ssss", $prod_name, $prod_descript, $prod_price, $img_names);
$stmt->execute()
if($stmt->affected_rows > 0) {
   //header("location:https://sample.com"); #affected_rows > 0 so row was inserted
} else {
   echo 'There was an issue adding this item.'; #failed to insert;
}

That should solve the issue. It is a prepared statement that will handle the issue with unescaped commas in the string as well as prevent SQL injection. Because prodId is auto increment, you don't need it in your statement, at least in MySQL you don't. The "ssss" part of the statement is assuming you are passing string values to the Db. Possible data types to be passed are:

• i - integer
• d - double
• s - string
• b - blob

See WC3Schools for more about php and prepared statements.