$_GET updated_value(?) - Another In-Place Editor(Jquery Plugin) question

Question

Using PHP, and MySql, I am trying to implement this rather snazzy in-place editor available here:

tutorial: http://www.davehauenstein.com/code/jquery-edit-in-place/

js file: http://davehauenstein.com/code/scripts/jquery.inplace.min.js

OK what is happening is,

I click the element to edit the text.
I clear the old text, and enter the new text.
I click outside of the element to initiate Ajax to save the new text.
1. Ajax shows "Saving..", which is default text for updating element.
2. The new text is updated in the database.
Element reloads, and instead of showing the new text inside of element, the element shows (Click here to edit text), which is the default text in the js file for an element that returns empty.

The Problem: Only once I refresh the page manually, is the new text loaded in element. Instead of loading in the element without refreshing.

The element with in-place edit:

<div class="editme1"><?php
$content = $_GET['update_value'];
// i added this to try and get the updated value but im
// not really sure, just a guess. i have also used $_POST
// in an attempt to catch it....but i feel stupid even
// saying that..lol
if(!empty($content)) { echo "$content"; } else 
{ echo "$row[profilevalue_8]"; }
?></div>

The file (update.php) which updates the database:

<?php include('includes/config.php');
include('includes/functions.php');
$name = $_POST[update_value];
$update = mysql_query("UPDATE profilevalues SET profilevalue_8 = '".$name."' 
WHERE profilevalue_user_id = '".uid()."'") or die(mysql_error());
?>

The javascript

<script type="text/javascript">
    $(document).ready(function(){
        $(".editme1").editInPlace({
            url: "http://www.mysite.com/update.php",
            params: "ajax=yes",
        });
</script>

The issue is I guess, is that I cant seem to reflect the changes in the element as expected.

I would be so grateful for any help.

Thanks

By inserting form POST data straight into SQL you have a huge SQL Insert issue. — Jon Winstanley
– Jon Winstanley, Commented Mar 27, 2009 at 9:03
Hi Jon, Thanks for your comment. I am aware of the danger of not sanitizing the input before posting into the database, but this is just a "preliminary example" of what i am trying to achieve. Either way, thanks for your input, as this is important information for all to know. — Lea
– Lea, Commented Mar 27, 2009 at 9:39

Bogdan Constantinescu · Accepted Answer · 2009-03-27 09:08:29Z

1

Your forgot something in the update.php :) Every In Place Editor does an AJAX request to the update file and then puts in the edited element the things it gets in the update.php with that request.

So your update.php needs to be like this

<?php include('includes/config.php');
include('includes/functions.php');
$name = $_POST[update_value];
$update = mysql_query("UPDATE profilevalues SET profilevalue_8 = '".$name."' 
WHERE profilevalue_user_id = '".uid()."'") or die(mysql_error());

echo $_POST['update_value']; //add this to your file and it should be working now
?>

answered Mar 27, 2009 at 9:08

Bogdan Constantinescu

5,3864 gold badges42 silver badges51 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Lea Over a year ago

I am so silly.... but sometimes it takes a person to point out the obvious for someone(me) to get it...lolol.... Thank you, I am forever in your debt...lol

Tom Haigh · Accepted Answer · 2009-03-27 09:15:12Z

0

To add to what Bogdan Constantinescu said, I think it is worth pointing out that to guard against people entering nasty data you should really

Call htmlspecialchars() on any untrusted strings you are sending to the browser as HTML. This will help prevent XSS attacks.
Call mysql_real_escape_string() on any strings you are putting directly into SQL statements. This will protect you from SQL injection attacks.

answered Mar 27, 2009 at 9:15

Tom Haigh

57.8k21 gold badges119 silver badges143 bronze badges

1 Comment

Lea Over a year ago

Hi tomhaigh, thanks for your comment. I whole heartedly agree, very much so worth point out those two important functions. And to also note to any readers, that this is a "preliminary example" used to test, and that all input should be sanitized before posting. Thanks!

Collectives™ on Stack Overflow

$_GET updated_value(?) - Another In-Place Editor(Jquery Plugin) question

2 Answers 2

1 Comment

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related