can i use javascript to save an item to a database using sql script?
A:
no, you'd have to use some serverside processing language , such as php, asp....
pixeline
2009-09-12 14:16:02
can i pass a javascript value to a php variable? for example i will get the value of a textarea through javascript then copy it to a php variable.
noob
2009-09-12 14:19:07
yes, you can pass JS data as a querystring param or in a form input when you make a request
annakata
2009-09-12 14:44:47
can you give me an example. i'm sorry i'm such a noob.
noob
2009-09-12 14:57:25
if you are a noobie, i suggest you use the jquery javascript library. It will ease your learning curve a lot. Then you could do something like:$.post("test.cgi",{ name: "John", time: "2pm" },function(data){alert("Data saved: " + data);});Here is a good starting point: http://www.sitepoint.com/article/ajax-jquery/
pixeline
2009-09-13 12:47:52
+4
A:
Not directly, unless you are working with a client-side database. However, you can hook JavaScript up with a server-side script (whichever backend you'd prefer) using XMLHttpRequest.
cpharmston
2009-09-12 14:16:07
+1
A:
As in Javascript on the browser? No, you can't.
Hypothetically you could use AJAX techniques to push SQL commands through a server layer and thence to the database but you really, really wouldn't want to since that would be an unholy mother of all security risks.
annakata
2009-09-12 14:16:53
+2
A:
You really don't want to do this. If you store SQL in your client-side javascript, you are exposing the details and structure of your database to an attacker. Creating an AJAX method to execute passed in javascript without creating a hole and attacker could use to perform SQL Injection attacks would be quite difficult.
Jarret R
2009-09-12 14:34:20
As long as your server-side script does a thorough job of input sanitization, this isn't a bad idea. Assuming that you don't pass a string of raw SQL as a variable...that would be bad.
cpharmston
2009-09-13 00:00:12