insert symbols into mysql using php

Question

I have this web service

http://www.example.com/addregisteredusers.php?emailId=test@tets.com&userName=

php code:

    $emailId=$_REQUEST['emailId'];      
$userName=$_REQUEST['userName'];

    $insertDetails=mysql_query("INSERT INTO `registration` (`userName`, `emailId`) VALUES ('$userName', '$emailId')");

when go to database the userName field is empty.

**Danger**: You are using [an **obsolete** database API](http://stackoverflow.com/q/12859942/19068) and should use a [modern replacement](http://php.net/manual/en/mysqlinfo.api.choosing.php). You are also **vulnerable to [SQL injection attacks](http://bobby-tables.com/)** that a modern API would make it easier to [defend](http://stackoverflow.com/questions/60174/best-way-to-prevent-sql-injection-in-php) yourself from. — Quentin, Apr 01 '14 at 11:04
You have no error checking in place to see if the query was successful or to report any messages if it was not. — Quentin, Apr 01 '14 at 11:04
How did you realise that your username field was empty? The characters you are trying to insert are very rare indeed, and I would expect them to be unsupported by most fonts, including, for instance, the font used by your console. Perhaps your data was in fact correctly inserted. — RandomSeed, Apr 01 '14 at 11:26
someone tried to register with these chars, what can i do with him? — Ayman Hussein, Apr 01 '14 at 11:31
type: in this comment how stackoverflow dealing with them and store them into database and print them correctly !!!! — Ayman Hussein, Apr 01 '14 at 11:33
@AymanHussein I see only boxes. Are these special characters are like Copyright symbol, smileys? — Yuva Raj, Apr 01 '14 at 11:38
not boxes, your browser seems can not handle them or your os is not have the correct font. what is your browser and os you are using? — Ayman Hussein, Apr 01 '14 at 11:43

Ananth · Answer 1 · 2014-04-01T11:37:23.420

1

I have created table with fields like below screens

Structure of table

enter image description here

Datas in the table

enter image description here

I have used this code.

     $emailId = mysql_real_escape_string($_REQUEST['email']);
$userName = mysql_real_escape_string($_REQUEST['uname']);

mysql_query("INSERT INTO `new` (`userName`, `emailId`) VALUES ('$userName', '$emailId')") or die(mysql_error());

edited Apr 01 '14 at 11:37

answered Apr 01 '14 at 11:06

Ananth

1,520
3
15
28

field type: varchar(500) – Ayman Hussein Apr 01 '14 at 11:10
if you use this code, did you get any error from mysql_error() ? – Ananth Apr 01 '14 at 11:13
no errors and the record added successfully to db with empty userName – Ayman Hussein Apr 01 '14 at 11:13
the issue is not in escape string the issue in symbols – Ayman Hussein Apr 01 '14 at 11:14
yeah. i created same fields in my table. when i run query it is working fine for me. i used utf8_general_ci as collation – Ananth Apr 01 '14 at 11:22
I have tried your solution before and did not work, the issue is not in single or double quotation the issue in symbols – Ayman Hussein Apr 01 '14 at 11:29

Ayman Hussein · Answer 2 · 2014-04-01T13:06:01.167

1

i solved the problem by change table and field charset from utf8 to utf8mb4

edited Apr 01 '14 at 13:06

answered Apr 01 '14 at 11:58

Ayman Hussein

3,817
7
28
48

score -1 · Answer 3 · edited Apr 01 '14 at 11:05

-1

please run this one

$insertDetails = mysql_query("INSERT INTO `registration` (`userName`, `emailId`) VALUES ('".$userName."', '".$emailId."')");

edited Apr 01 '14 at 11:05

Quentin

914,110
126
1,211
1,335

answered Apr 01 '14 at 11:04

Sandeep Pawar

9
3

Why would using string concatenation instead of interpolation help? – Quentin Apr 01 '14 at 11:06
Because variables are only recognized in single quotes, not double quotes. – Realitätsverlust Apr 01 '14 at 11:07

insert symbols into mysql using php

3 Answers3