PHP mysqli query doesn't return any results

Question

I'm using this code here

<?php
error_reporting(1);
$servername = '127.0.0.1';
$username = '';
$password = '';
$dbname = 'splafpoo_users';
$conn = new mysqli($servername, $username, $password, $dbname);

if (mysqli_connect_errno()){
    printf("<b>Connection failed:</b> %s\n", mysqli_connect_error());
    exit;
} 

$key = '';

if(isset($_POST['key'])){
    $key = $_POST['key'];
}

$query = "SELECT * FROM users WHERE serial='$key'";
echo $query;

$result = $mysqli->query($query);
$row = $result->fetch_assoc();

echo $row;
?>

Running the query SELECT * FROM users WHERE serial='test' in phpMyAdmin returns the desired result however when trying to display the result using the code above nothing is displayed and I cannot figure out how. How do I display the result?

It's worth noting that your code is wide open to SQL injection. You should definitely use query parameters instead of executing user input as code. — David
– David, Commented Jan 3, 2017 at 17:44
Put the query inside your if statement so you do not run it if $key is not set. You're not getting any results because $key is set to blank and you have no records in your database where $key = ''; You are running this query: SELECT * FROM users WHERE serial='' instead of one where $key has a value. — Jay Blanchard
– Jay Blanchard, Commented Jan 3, 2017 at 17:46
@JayBlanchard I inserted the appropriate inside the IF statement and I do have a row that contains what I am looking for. To test I use a python script which sends the post request with the data 'key': 'test'. Here's a screenshot of my the query result in phpmyadmin i.imgur.com/n29UrK9.png — Iwan. J
– Iwan. J, Commented Jan 3, 2017 at 17:54
You manually set the variable to test but you're not checking $key inside your if condition. — Jay Blanchard
– Jay Blanchard, Commented Jan 3, 2017 at 18:13
WARNING: When using mysqli you should be using parameterized queries and bind_param to add user data to your query. DO NOT use string interpolation or concatenation to accomplish this because you have created a severe SQL injection bug. NEVER put $_POST or $_GET data directly into a query, it can be very harmful if someone seeks to exploit your mistake. — tadman
– tadman, Commented Jan 3, 2017 at 18:23

Sharkn8do · Accepted Answer · 2017-01-03 17:42:44Z

1

You're gonna need a good old fashion while loop

while($row = $result->fetch_assoc()) {
    echo $row['WHATEVERCOLUMNITISYOUWANT'];
}

also this is most definitely a duplicate.

answered Jan 3, 2017 at 17:42

Sharkn8do

1532 silver badges14 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Jay Blanchard Over a year ago

If there was a row that matched the echo the OP has would work.

Luca Jung · Accepted Answer · 2017-01-03 18:04:03Z

0

Use var_dump($row) instead of echo $row or you use echo with a key:
e.g. echo $row["user"]

edited Jan 3, 2017 at 18:04

answered Jan 3, 2017 at 17:41

Luca Jung

1,45011 silver badges25 bronze badges

Collectives™ on Stack Overflow

PHP mysqli query doesn't return any results

2 Answers 2

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related