Update not working for MySQL and PHP

Question

hi all, I am trying to update the entry in the database i ahve encrypted the field uniqueID

i think that is causing some problem.

$query  = "SELECT UniqueID FROM configuration";
$result = mysql_query($query);
$num_rows = mysql_num_rows($result);
echo $num_rows;
while($row = mysql_fetch_assoc($result))
{
 $dbuniqueID = Encryption::decrypt($row['UniqueID']);

 if($dbuniqueID == $UniqueID) 
 {
 // $UniqueID = Encryption::encrypt($UniqueID);
  echo $UniqueID;
  $insert = "UPDATE configuration SET status = 'ready', original_conf_path = '$Filepath'
   WHERE UniqueID = '$UniqueID'";
   mysql_query($insert);  
 }
}

Regards Newbie

Answer 1

$insert = "UPDATE configuration SET status = 'ready', SET original_conf_path = '".$Filepath."' WHERE UniqueID = '".$UniqueID."'";

Answer 2

Well the problem is here: WHERE UniqueID = '$UniqueID'";

cause $UniqueID holds a decrypted value so UniqueID in database is different from that in variable.

But if $UniqueID holds encrypted value than this line won't work: if($dbuniqueID == $UniqueID

cause you are comparing encrypted and decrypted values

Answer 3

There is no $UniqueID for your comparison or insert - it should be $row['UniqueID']

$insert = "UPDATE configuration SET status = 'ready', original_conf_path = '$Filepath'
             WHERE UniqueID = '$row[UniqueID]'";

You should also escape it:

    $insert = "UPDATE configuration SET status = 'ready',
        original_conf_path = '" . mysql_escape_string($Filepath) . "'
        WHERE UniqueID = '" . mysql_escape_string($row['UniqueID']) . "'";