使用数据库中的数据验证表单

Question

i have a problem with proper validation. Please take o look on this class:

class NewFirm {
private $hookup;
private $tableMaster;
private $sql;

private $b1_name; //name of a Firm which has to be checked

public function __construct() {
    $this->hookup = UniversalConnect::doConnect();
    $this->tableMaster = "b1_firm";

    $this->b1_name = trim($_POST['b1_name']);

    $this->insertFirm();
    $this->hookup->close();

}

private function insertFirm() {

    try {
        $this->sql = "SELECT b1_name FROM $this->tableMaster WHERE b1_name = '".$this->b1_name."'";
        $result = $this->hookup->query($this->sql);

        while($row = $result->fetch_assoc()) {
            if((strtolower($row['b1_name']) != strtolower($this->b1_name))) {
                $this->sql = "INSERT INTO $this->tableMaster (b1_id, b1_name) VALUES (NULL, '".$this->b1_name."')";
                $this->hookup->query($this->sql);

                $this->sql = "SELECT MAX(b1_id) FROM $this->tableMaster";
                $result = $this->hookup->query($this->sql);

                while($row = $result->fetch_assoc()) {
                    $_SESSION['b1_id'] = $row['MAX(b1_id)'];
                }

                $this->sql = "SELECT b1_name FROM $this->tableMaster WHERE b1_id = '".$_SESSION['b1_id']."' ";
                $result = $this->hookup->query($this->sql);

                while($row = $result->fetch_assoc()) {
                    $_SESSION['b1_name'] = $row['b1_name'];
                }

                $host = $_SERVER['HTTP_HOST'];
                $uri = ''; //folder
                $page = 'step_2.php';
                header("Location: http://$host/$page");

            } else {
                $_SESSION['error'] = true;

                $host = $_SERVER['HTTP_HOST'];
                $uri = ''; //folder
                $page = 'step_1.php';
                header("Location: http://$host/$page");

            }
        }

    } catch (Exception $e) {
        print "There is a problem: ".$e->getMessage();

    }
}

}

When a firm name is found in the data base everything is ok. The problem appears when a new firm name isn't found in the data base - it shows a 'blank screen' :/

Answer 1

By adding a flag to see if the contact is found or not, you can do something like redirecting to your first step where there is not contact found :

class NewFirm {
private $hookup;
private $tableMaster;
private $sql;

private $b1_name; //name of a Firm which has to be checked

public function __construct() {
    $this->hookup = UniversalConnect::doConnect();
    $this->tableMaster = "b1_firm";

    $this->b1_name = trim($_POST['b1_name']);

    $this->insertFirm();
    $this->hookup->close();

}

private function insertFirm() {

    try {
        $this->sql = "SELECT b1_name FROM $this->tableMaster WHERE b1_name = '".$this->b1_name."'";
        $result = $this->hookup->query($this->sql);

        //setting a flag
        $not_found = true;

        while($row = $result->fetch_assoc()) {
            //at least one contact was found
            $not_found = false;

            if((strtolower($row['b1_name']) != strtolower($this->b1_name))) {
                $this->sql = "INSERT INTO $this->tableMaster (b1_id, b1_name) VALUES (NULL, '".$this->b1_name."')";
                $this->hookup->query($this->sql);

                $this->sql = "SELECT MAX(b1_id) FROM $this->tableMaster";
                $result = $this->hookup->query($this->sql);

                while($row = $result->fetch_assoc()) {
                    $_SESSION['b1_id'] = $row['MAX(b1_id)'];
                }

                $this->sql = "SELECT b1_name FROM $this->tableMaster WHERE b1_id = '".$_SESSION['b1_id']."' ";
                $result = $this->hookup->query($this->sql);

                while($row = $result->fetch_assoc()) {
                    $_SESSION['b1_name'] = $row['b1_name'];
                }

                $host = $_SERVER['HTTP_HOST'];
                $uri = ''; //folder
                $page = 'step_2.php';
                header("Location: http://$host/$page");

            } else {
                $_SESSION['error'] = true;

                $host = $_SERVER['HTTP_HOST'];
                $uri = ''; //folder
                $page = 'step_1.php';
                header("Location: http://$host/$page");

            }
        }
        //if the contact was not found, redirect to the first step.
        if ($not_found){
            $_SESSION['error'] = true;

            $host = $_SERVER['HTTP_HOST'];
            $uri = ''; //folder
            $page = 'step_1.php';
            header("Location: http://$host/$page");
        }

    } catch (Exception $e) {
        print "There is a problem: ".$e->getMessage();

    }
}