How to post a JavaScript variable into a MySQL database using AJAX and PHP?

Question

I know this question gets asked a lot, but I went through all the similar questions on here and I still can't fix my script. The Insert query works, but the "Name" shows up as 0 in the database. My JavaScript:

<html>
<head>
<script>
function SendData() 
{
var Name = "Ballsack"; //The name I am trying to get into database.
        if (window.XMLHttpRequest) 
        {
            // code for IE7+, Firefox, Chrome, Opera, Safari
            xmlhttp = new XMLHttpRequest();
        } 
        else 
        {
            // code for IE6, IE5
            xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
        }

        xmlhttp.open("GET","getuser.php?q="+Name,true);
        xmlhttp.send();
        alert("The query was send");

}
</script>
</head>
<body>

<form>
<input type="button" value="Send" onClick="SendData();"><br>
</form>

</body>
</html>

My PHP (getuser.php):

<!DOCTYPE html>
<html>
<head>

</head>
<body>

<?php
$q = intval($_GET['q']);
$con = mysqli_connect('localhost','jack','*****','VLA');
if (!$con) 
{
    die('Could not connect: ' . mysqli_error($con));
}

$query = "INSERT INTO TrafficRegisterDetails
(Name,Surname,Age,Address,TrafficRegNumb,NumberPlate)
VALUES('$q','Sak','12','Kernma','1212','blahblah')";
$result = $con->query($query);
if (!$result) die ("Database access failed: ".$con->error);

mysqli_close($con);
?>
</body>
</html>

First fix your security issue for sql injection. Then you don't need html code in your getuser.php file. Are those file on the same server ? maybe you should have a look at CORS and headers to make an API. Then why parsing the name you are sending as int ? Read php manual to get some informations about what are the functions you are using doing. — Zyigh
– Zyigh, Commented Oct 31, 2018 at 12:24
I know I know :) This was just to unserstand where I went wrong, but I found it, thank you! — Jaun Samtin
– Jaun Samtin, Commented Oct 31, 2018 at 12:29
Possible duplicate of Access JavaScript variables value in php to store in mysql — El.Hum
– El.Hum, Commented Oct 31, 2018 at 12:39

Mohammad Ali · Accepted Answer · 2018-10-31 12:25:38Z

1

It is because of $q = intval($_GET['q']);.
It change your string to 0. See PHP intval

Good Luck

edited Oct 31, 2018 at 12:25

answered Oct 31, 2018 at 12:23

Mohammad Ali

948 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Jaun Samtin Over a year ago

Thank you for the reply sir. Could you suggest what $q should be set to then?

Mohammad Ali Over a year ago

@JaunSamtin You can use PHP filter functions to solve sql injection problems.

Mohammad Ali Over a year ago

@JaunSamtin Please set correct answer as Accepted Answer to others can use your question.

José Carlos PHP · Accepted Answer · 2018-10-31 12:24:40Z

0

You are doing an intval:

$q = intval($_GET['q']);

That's why "Ballsack" turns to 0.

answered Oct 31, 2018 at 12:24

José Carlos PHP

1,4972 gold badges14 silver badges23 bronze badges

1 Comment

Jaun Samtin Over a year ago

I see, thank you. I was unaware of the meaning of intval.. I get it

Collectives™ on Stack Overflow

How to post a JavaScript variable into a MySQL database using AJAX and PHP?

2 Answers 2

3 Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

3 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related