php/mysql code question

[Smolek]

What's the code to open a db and select a certain field ?

For example, I'm using the mail function and need the code to look up the session id [id field of the users table] of the user, then look for the user's email from the Users table and the email field so that the $email command works.

I know it's gotta be pretty simple, but i am not familiar enough with it to know what to put. Thanks in advance.

 

[Barnaby W. Füi]

Well there are quite a few little things you can do differently, so it would be a bit of a task to try and exhaustively explain it here. But there should be plenty of tutorials and stuff if you google it.

http://webmonkey.wired.com/webmonkey/99/21/index2a_page6.html?tw=programming

 

[Smolek]

Well, I do have something, I just don't know what to do with the data between the ")); and the $to = $email'; to get it to work

 

[Barnaby W. Füi]

If you're just selecting a single field of a single row, you can do:

$email = mysql_result(mysql_query("SELECT email FROM users WHERE id=$sid"), 0);

I dunno what else you're trying to do but that'll get you the actual data in the field as a string.

And when passing stuff like that ($sid) to mysql you have to be damn sure that it doesn't contain anything unexpected. Imagine if you grabbed $sid directly out of the query string -- I could do this to your page:

http://foo.com/yourpage.php?sid=%3bdrop%20table%20users%3b

(%3b is semicolon, %20 is space)

 

[Smolek]

All i'm trying to do is have the code detect which user is logged in (the sid field) and when they submit the information, the code looks up their info and sends them a confirmation to the email address on file.