Hello..!!

I created a Guestbook. But people can submit comments without writing any thing in the field. I mean they can submit null (empty) comments. Can anyone help me to fix this?? I tried to fix this.. but I couldn't

Here is the source code of form action file (addguestbook.php)

<?php
include("config.php");
$tbl_name="xxx"; // Table name

// Connect to server and select database.
mysql_connect("$host", "$username", "$password")or die("cannot connect server ");
mysql_select_db("$dbname")or die("cannot select DB");


$datetime=date("y-m-d h:i:s"); //date time

$name = htmlentities($name);
$email = htmlentities($email);
$comment = htmlentities($comment);

$sql="INSERT INTO $tbl_name(name, email, comment, datetime)VALUES('$name', '$email', '$comment', '$datetime')";
$result=mysql_query($sql);

//check if query successful
if($result){
header ("Location:comments.php");
}

else {
echo "ERROR";
}

mysql_close();
?>

check for the comments field being empty and if it is ...


... don't add it to the database

It automatically adds the comments to Database..!! i want disable submitting empty comments through PHP we can do it.. But I dont know how to apply it

here the above modified code

PHP Code:

<?php
include("config.php");
$tbl_name="xxx"; // Table name

// Connect to server and select database.
mysql_connect("$host", "$username", "$password")or die("cannot connect server ");
mysql_select_db("$dbname")or die("cannot select DB");


$datetime=date("y-m-d h:i:s"); //date time

$name = htmlentities($name);
$email = htmlentities($email);
$comment = htmlentities($comment);


$sql="INSERT INTO $tbl_name(name, email, comment, datetime)VALUES('$name', '$email', '$comment', '$datetime')";
if($comment!="")
$result=mysql_query($sql);

//check if query successful
if($result){
header ("Location:comments.php");
}

else {
echo "ERROR";
}

mysql_close();
?>

just put this
if($comment!="")
before inserting the comment into the database as shown above

this code might work the way you want.

PHP Code:

<?php
include("config.php");
$tbl_name="xxx"; // Table name

// Connect to server and select database.
mysql_connect("$host", "$username", "$password")or die("cannot connect server ");
mysql_select_db("$dbname")or die("cannot select DB");


$datetime=date("y-m-d h:i:s"); //date time

$name = htmlentities($name);
$email = htmlentities($email);
$comment = htmlentities($comment);

if (empty($comment)) {
mysql_close();
echo "ERROR";
}
else {
$sql="INSERT INTO $tbl_name(name, email, comment, datetime)VALUES('$name', '$email', '$comment', '$datetime')";
$result=mysql_query($sql);

//check if query successful
if($result){
header ("Location:comments.php");
}

else {
echo "ERROR";
}

mysql_close();
}
?>

Thanks simster.. It works

and thanks every for replies