"You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ') VALUES ('aca va el producto', 'la descripcion', 1, 1, 1, 234)' at line 1"
los tres valores 1 son de un menu desplegable y 234 es el valor del producto.
aca el codigo de la web...
Código PHP:
<?php
if (!isset($_SESSION)) {
session_start();
}
$MM_authorizedUsers = "1";
$MM_donotCheckaccess = "false";
// *** Restrict Access To Page: Grant or deny access to this page
function isAuthorized($strUsers, $strGroups, $UserName, $UserGroup) {
// For security, start by assuming the visitor is NOT authorized.
$isValid = False;
// When a visitor has logged into this site, the Session variable MM_Username set equal to their username.
// Therefore, we know that a user is NOT logged in if that Session variable is blank.
if (!empty($UserName)) {
// Besides being logged in, you may restrict access to only certain users based on an ID established when they login.
// Parse the strings into arrays.
$arrUsers = Explode(",", $strUsers);
$arrGroups = Explode(",", $strGroups);
if (in_array($UserName, $arrUsers)) {
$isValid = true;
}
// Or, you may restrict access to only certain users based on their username.
if (in_array($UserGroup, $arrGroups)) {
$isValid = true;
}
if (($strUsers == "") && false) {
$isValid = true;
}
}
return $isValid;
}
$MM_restrictGoTo = "../../index.php";
if (!((isset($_SESSION['MM_Username'])) && (isAuthorized("",$MM_authorizedUsers, $_SESSION['MM_Username'], $_SESSION['MM_UserGroup'])))) {
$MM_qsChar = "?";
$MM_referrer = $_SERVER['PHP_SELF'];
if (strpos($MM_restrictGoTo, "?")) $MM_qsChar = "&";
if (isset($QUERY_STRING) && strlen($QUERY_STRING) > 0)
$MM_referrer .= "?" . $QUERY_STRING;
$MM_restrictGoTo = $MM_restrictGoTo. $MM_qsChar . "accesscheck=" . urlencode($MM_referrer);
header("Location: ". $MM_restrictGoTo);
exit;
}
?>
<?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
{
$theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
$theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);
switch ($theType) {
case "text":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "long":
case "int":
$theValue = ($theValue != "") ? intval($theValue) : "NULL";
break;
case "double":
$theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
break;
case "date":
$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
break;
case "defined":
$theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
break;
}
return $theValue;
}
}
$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
$editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "form1")) {
$insertSQL = sprintf("INSERT INTO productos (producto, descripcion, estado, categoria, mayorista, valor,) VALUES (%s, %s, %s, %s, %s, %s)",
GetSQLValueString($_POST['producto'], "text"),
GetSQLValueString($_POST['descripcion'], "text"),
GetSQLValueString($_POST['estado'], "int"),
GetSQLValueString($_POST['categoria'], "int"),
GetSQLValueString($_POST['mayorista'], "int"),
GetSQLValueString($_POST['valor'], "int"));
mysql_select_db($database_cnx, $cnx);
$Result1 = mysql_query($insertSQL, $cnx) or die(mysql_error());
$insertGoTo = "../../imagen2.php?cargo";
if (isset($_SERVER['QUERY_STRING'])) {
$insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
$insertGoTo .= $_SERVER['QUERY_STRING'];
}
header(sprintf("Location: %s", $insertGoTo));
}
mysql_select_db($database_cnx, $cnx);
$query_rsd_producto = "SELECT MAX(id_producto) as id_producto FROM productos";
$rsd_producto = mysql_query($query_rsd_producto, $cnx) or die(mysql_error());
$row_rsd_producto = mysql_fetch_assoc($rsd_producto);
$totalRows_rsd_producto = mysql_num_rows($rsd_producto);
mysql_select_db($database_cnx, $cnx);
$query_estados = "SELECT * FROM estados";
$estados = mysql_query($query_estados, $cnx) or die(mysql_error());
$row_estados = mysql_fetch_assoc($estados);
$totalRows_estados = mysql_num_rows($estados);
mysql_select_db($database_cnx, $cnx);
$query_categorias = "SELECT * FROM categorias";
$categorias = mysql_query($query_categorias, $cnx) or die(mysql_error());
$row_categorias = mysql_fetch_assoc($categorias);
$totalRows_categorias = mysql_num_rows($categorias);
mysql_select_db($database_cnx, $cnx);
$query_mayorista = "SELECT * FROM mayorista";
$mayorista = mysql_query($query_mayorista, $cnx) or die(mysql_error());
$row_mayorista = mysql_fetch_assoc($mayorista);
$totalRows_mayorista = mysql_num_rows($mayorista);
?>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Agregar Producto</title>
</head>
<body>
<?php if (!isset ($_GET['cargo'])){ ?>
<p><span class="style2">PASO 1:<br />
</span><span class="style15">Agregar un producto</span></p>
<form action="<?php echo $editFormAction; ?>" method="post" name="form1" id="form1">
<table align="center">
<tr valign="baseline">
<td nowrap="nowrap" align="right">Producto:</td>
<td><input name="producto" type="text" id="producto" value="" size="32" /></td>
</tr>
<tr valign="baseline">
<td nowrap="nowrap" align="right">Descripcion:</td>
<td><textarea name="descripcion" cols="32" id="descripcion"></textarea></td>
</tr>
<tr valign="baseline">
<td nowrap="nowrap" align="right">Valor:</td>
<td><input name="valor" type="integer" id="valor" value="" size="32" /></td>
</tr>
<tr valign="baseline">
<td nowrap="nowrap" align="right">Estado:</td>
<td><select name="estado" id="id_estado">
<?php
do {
?><option value="<?php echo $row_estados['id_estado']?>"><?php echo $row_estados['estado']?></option>
<?php
} while ($row_estados = mysql_fetch_assoc($estados));
$rows = mysql_num_rows($estados);
if($rows > 0) {
mysql_data_seek($estados, 0);
$row_estados = mysql_fetch_assoc($estados);
}
?>
</select></td>
</tr>
<tr valign="baseline">
<td nowrap="nowrap" align="right">Categoria:</td>
<td><select name="categoria" id="categoria">
<?php
do {
?>
<option value="<?php echo $row_categorias['id_categoria']?>"><?php echo $row_categorias['categoria']?></option>
<?php
} while ($row_categorias = mysql_fetch_assoc($categorias));
$rows = mysql_num_rows($categorias);
if($rows > 0) {
mysql_data_seek($categorias, 0);
$row_categorias = mysql_fetch_assoc($categorias);
}
?>
</select></td>
</tr>
<tr valign="baseline">
<td nowrap="nowrap" align="right">Mayorista:</td>
<td><select name="mayorista" id="mayorista">
<?php
do {
?>
<option value="<?php echo $row_mayorista['id_mayorista']?>"><?php echo $row_mayorista['mayorista']?></option>
<?php
} while ($row_mayorista = mysql_fetch_assoc($mayorista));
$rows = mysql_num_rows($mayorista);
if($rows > 0) {
mysql_data_seek($mayorista, 0);
$row_mayorista = mysql_fetch_assoc($mayorista);
}
?>
</select> </td>
</tr>
<tr valign="baseline">
<td nowrap="nowrap" align="right"> </td>
<td><input type="submit" onClick="MM_validateForm('producto','','R','descripcion','','R','valor','','R');return document.MM_returnValue" value="Siguiente" /></td>
</tr>
</table>
<input type="hidden" name="MM_insert" value="form1" />
</form>
<p> </p>
<p>
<?php }else{ ?>
</p>
<p> </p>
<p> </p>
<p> </p>
<p align="left"><span class="style2">PASO 2:<br />
</span><span class="style15">Subir la foto del producto</span></p>
<p>
<form action="../../imagen2.php" method="post" enctype="multipart/form-data" name="foto" id="form2">
<label>
<input name="archivo" type="file" class="style30" />
</p>
<p>
<input name="submit" type="submit" class="style30" id="submit" value="enviar" />
<label></label></p>
</form>
<?php } ?>
</body>
</html>
<?php
mysql_free_result($rsd_producto);
mysql_free_result($estados);
mysql_free_result($categorias);
mysql_free_result($mayorista);
?> Si me pueden ayudar se los agradezco!!!
