Problems in PHP

Question

Hey, you guys, come on! I’m new with PHP and Mysql Database.

For several days I’ve been breaking my head with a code and I can’t find the error at all. :/

I have an index.php page, with a form calling the file "cep.php". In this file, I need the command to read the input sent by the user, and check if the data entered in exists in the table "cep", in the field "CEP".

If the zip code exists in the bd, redirect to the "ok.php" page If it does not exist, it redirects to the "bad.php page".

index php.:

<form method="post" action="cep.php" >
   <input type="text" class="form-control form-white" placeholder="Digite seu CEP" name="cepinput" id="cepinput" maxlength="9" OnKeyPress="formatar('#####-###', this)" />
   <input type="submit" class="btn btn-submit" value="Verificar Disponibilidade" />
</form>

cep.php:

<?php

require "conexao.php";

// Recuperamos o cep enviado pelo formulário
$cep = $_GET['cepinput'];

// Verificamos no banco de dados o cep equivalente
$resultado = mysql_query("SELECT * FROM cep WHERE CEP=$cep");

// Descobrimos o total de registros encontrados
$num_rows = mysql_num_rows($resultado);

// Se houver o cep informado
if ($num_rows > 0) {

// Exibe a página OK
$url = 'ok.php';
echo'<META HTTP-EQUIV=Refresh CONTENT="0; URL='.$url.'">';  

// Se não houver o cep informado
} 
else {
$urlerro = 'bad.php';
echo'<META HTTP-EQUIV=Refresh CONTENT="0; URL='.$urlerro.'">';  
}

?>

The error happens when I press the "Submit" button. It returns the "bad.php" page, even if I insert an existing zip code into the BD.

From now on, thank you very much! ;)

Answer 1

Try with PDO is safer, use this algorithm here and see if like, is tested and works.

<?php try { $conect = new PDO("mysql:host=" . $mysql_host . "; dbname=" . $mysql_base, $mysql_user, $mysql_pass);
    $conect -> setAttribute(PDO :: ATTR_ERRMODE, PDO :: ERRMODE_EXCEPTION);
    $conect -> exec("set names utf8");
    $statement = $conect -> prepare("SELECT * FROM cep WHERE CEP = :cep");
    $statement_array = array(':cep' => $_GET["cepinput"]);
    foreach($statement_array as $array_key => $bindvalue) {
        $statement -> bindValue($array_key, $bindvalue); }
    $statement -> execute();
    $statement = $statement -> fetchAll();
    if(count($statement)) {
        $url = 'ok.php';
        echo'<META HTTP-EQUIV=Refresh CONTENT="0; URL='.$url.'">';
    } else {
        $urlerro = 'bad.php';
        echo'<META HTTP-EQUIV=Refresh CONTENT="0; URL='.$urlerro.'">';
    }
$conect = null; } catch(PDOException $error) { echo $error -> getMessage(); }