How to check the value of the database requested in the input?

$before=$_POST['before']; $after=$_POST['after']; if(!empty($before) && !empty($after)){ $query2 = mysql_query("UPDATE mytabl SET source='$after' WHERE source=$before "); $result= mysql_query("SELECT source FROM mytabl WHERE source='$before'"); ?> <pre> <?php echo $result; $r=mysql_fetch_assoc($result); print_r($r); ?>

displays Resource id # 5

1 answer 1

 <?php // $database - дескриптор подключения к базе данных $before = mysqli_real_escape_string($database, $_POST['before']); $after = mysqli_real_escape_string($database, $_POST['after']); if (!empty($before) && !empty($after)) { $query = 'UPDATE mytabl SET source = ' . $after . ' WHERE source = ' . $before; mysqli_query($database, $query); $query = 'SELECT source FROM mytabl WHERE source = ' . $before; if ($result = mysqli_query($database, $query)) { $row = mysqli_fetch_assoc($result); echo $row['source']; } }