mySQL Query Probleme

Lupu · #1 (**permalink**) 11-11-09, 05:57

H`i... I`m working on a members only site .... I want at login to check if an IP is banned or not ... for this I used the following syntax:

PHP Code:


			

$ip = getip(); //GET USERS IP



    //Check IP bans    

    $nip = ip2long($ip);

    $res = mysql_query("SELECT * FROM bans WHERE $nip >= first AND $nip <= last")  or die(mysql_error());
 //first and last are columns in bans table
    if (mysql_num_rows($res) > 0) {

        $row = mysql_fetch_array($res);

        header("HTTP/1.0 403 Forbidden");

        echo "<html><head><title>Forbidden</title></head><body><h1>Forbidden</h1>Unauthorized IP address.<br />".

        "Reason for banning: $row[comment]</body></html>";

        die;

    }

If I try to access the site I receive the following error:

Code:

Mysql sintax error. Try to find corect sintax to use near 'SELECT * FROM bans WHERE $nip >= first AND $nip <= last'.

I`m using mysql-server-5.0 on a Ubuntu machine

healdem · #2 (**permalink**) 11-11-09, 06:38

so what is the actual message
what is the actual SQL that is being sent to the SQL engine

you might want to try the "between" syntax

Lupu · #3 (**permalink**) 11-11-09, 08:21

Quote:

Originally Posted by Lupu

If I try to access the site I receive the following error:

Code:

Mysql sintax error. Try to find corect sintax to use near 'SELECT * FROM bans WHERE $nip >= first AND $nip <= last'.

with between is thesame erorr...only that the mesage is

Code:

Mysql sintax error. Try to find corect sintax to use near 'SELECT * FROM bans WHERE $nip between first AND  last'.

healdem · #4 (**permalink**) 11-11-09, 08:52

so what is the actual SQL you are sending to the SQL engine
not the script but the SQL executed

PHP Code:


			
$strSQL = "SELECT * FROM bans WHERE $nip >= first AND $nip <= last";

$res = mysql_query($strSQL)  //or die(mysql_error());
//for now
die (echo $strSQL."\n".$mysql_errno()."\n".$mysql_error());

Lupu · #5 (**permalink**) 11-11-09, 10:33

Quote:

Originally Posted by healdem

so what is the actual SQL you are sending to the SQL engine
not the script but the SQL executed

PHP Code:


			
$strSQL = "SELECT * FROM bans WHERE $nip >= first AND $nip <= last";

$res = mysql_query($strSQL)  //or die(mysql_error());
//for now
die (echo $strSQL."\n".$mysql_errno()."\n".$mysql_error());

tx a lot.... working now with your advice...... only 1 change to your script:
i`ve changed

PHP Code:


			

$strSQL = "SELECT * FROM bans WHERE $nip >= first AND $nip <= last";

with

PHP Code:


			

$strSQL = "SELECT * FROM bans WHERE '$nip' >= first AND '$nip' <= last";

i don`t know if that is ok... i mean if is realy chek if IP is banned.. but i can see mi site now and I can continue mi work...
sorry for mi bad eng

Internet Services

Web Development

Digital Marketing

Consumer Tech