php - I can't get my redirect to work if the user's ip is in the database

Solution:

If enough to check in the database if there's a record of that ip:

$ip = $_SERVER['REMOTE_ADDR'];

$query = "SELECT id FROM landing WHERE ip = '" . mysql_real_escape_string($ip) . "' LIMIT 1"; 

$result = mysql_query($query);

$num = mysql_num_rows($result);

//if the ip is not in the database make the redirect 

if($num == 0) {

    header("Location: https://tantami.com/welcome/index.php");

} 
Copy code

Solution:

There are several issues going on here, in a rough order of importance with regards to your problem they are:

• Encase your value in quotes. soSELECT * FROM landing WHERE ip = '$ip' notice the$ip is encased, as is required for strings in a Query.

• Please start to use MySQLi rather than the deprecated MySQL. This is more secure, and still supported by both MySQL and PHP. research on StackOverflow how to make the pretty easy transfer.

• Your mysql_num_rows is a integer count so should not be in quotes. So setif (mysqli_num_rows($result) == 0 ) .

• Immediately after yourheader() you should add a die or end command such asexit;

• PHP should ideally always open with a full<?php declaration.

• I'll say it again, use MySQLi.

• The$ip should be escaped in this script, specifically, usemysqli_real_escape_string() or even use a REGEX pattern to remove any non valid characters from the$ip, before testing in the SQL query.

  Code:

  $ip = preg_replace("/[^0-9:.]/","",$ip);

Solution:

your problem was in your query.

you should add (Apostrophe) before and after of all string in query.

(i also change your select * query yo select count(*))

$ip = getenv('HTTP_CLIENT_IP')?:
getenv('HTTP_X_FORWARDED_FOR')?:
getenv('HTTP_X_FORWARDED')?:
getenv('HTTP_FORWARDED_FOR')?:
getenv('HTTP_FORWARDED')?:
getenv('REMOTE_ADDR');

$query = "SELECT count(*) as nums FROM landing WHERE ip = '$ip'"; 
$result = mysql_query($query);


$row= mysql_fetch_array($result);
$num=$row['nums'];
if($num == '0') {

header("Location: https://tantami.com/welcome/index.php");

} else {



}
Copy code