[RESOLVED] You must enter a number greater then 0!

[Nightwalker83]

Hi,

I have not done php for awhile and I am experience a problem with the following code

/convert the POST variables from the html to local variables
if(isset($_POST['cid'], $_POST['fname'], $_POST['lname'], $_POST['snum'], $_POST['sname'], $_POST['suburb'], $_POST['pcode'], $_POST['country'], $_POST['phone'], $_POST['email'], $_POST['user'],$_POST['upassword'],$_POST['repassword'])){
$cid = mysql_real_escape_string($_POST['cid']);
$fname = mysql_real_escape_string($_POST['fname']);
$lname = mysql_real_escape_string($_POST['lname']);
$snum = mysql_real_escape_string($_POST['snum']);
$sname = mysql_real_escape_string($_POST['sname']);
$suburb = mysql_real_escape_string($_POST['suburb']);
$pcode = mysql_real_escape_string($_POST['pcode']);
$country = mysql_real_escape_string($_POST['country']);
$phone = mysql_real_escape_string($_POST['phone']);
$email = mysql_real_escape_string($_POST['email']);
$user = mysql_real_escape_string($_POST['user']);
$password = mysql_real_escape_string($_POST['upassword']);
$repassword = mysql_real_escape_string($_POST['repassword']);
$ccnumber = mysql_real_escape_string($_POST['credit_card']);
}

//validate or send data.
  if($_SERVER['REQUEST_METHOD'] == "POST"){
if($cid==""||$cid ==0){
echo 'You must enter a number greater then 0!';
exit;
}
if($fname==""){
echo 'You must enter your first name!';
exit;
}
if($lname==""){
echo 'You must enter your last name!';
exit;
}
if($snum==""){
echo 'You must enter a street number!';
exit;
}
if($sname==""){
echo 'You must enter a street name!';
exit;
}
if($suburb==""){
echo 'You must enter a suburb!';
exit;
}
if($pcode==""){
echo 'You must enter a post code!';
exit;
}
if($country==""){
echo 'You must enter your counry name!';
exit;
}
if($phone==""){
echo 'You must enter your phone number!';
}
if (!(is_numeric($phone))){
echo "Please enter a numeric value!";
}
if($email==""){
echo 'You must enter your email address!';
exit;
}
if($user==""){
echo 'You must enter a username!';
exit;
}
if($password==""){
echo 'You must enter a password!';
exit;
}
if($repassword==""){
echo 'You must reenter the password!';
exit;
}
if(!($repassword==$password)){
echo 'Password does not match! Please reenter the password.';
exit;
}
//send mysql a query to select records from the products table where the id's match. If the query fails exit
if (!($result = mysql_query("SELECT * FROM customers where cid= '$cid'"))){
echo '&message=query+failed&';
exit;
}
//Retrieve the number of rows (records)that have been returned from above query
$num_results = mysql_num_rows($result);
if($num_results <= 0) {//customer does not exist so insert
$query = "INSERT INTO customers (cid, FName, LName, Housenum,  Streetname, Suburb, Postcode, Country, Phone, Email, Username, Password, Credit_Card_Number)
VALUES ('$cid','$fname', '$lname', '$snum', '$sname','$suburb','$pcode','$country','$phone','$email','$user','$password', '$ccnumber')";
if (mysql_query($query , $conn)){
$update = "update customers set FName='$fname', LName='$lname' where customerid='$cid'";
echo "&message=the+customer+'$fname'+'$lname'+has+been+successfully+added&";
}else{
echo '&message=the+insert+was+not+successful&';
}
if(!mysql_query($update, $conn)){
echo "&message=the+details+have+been+updated&";
}else{
echo "&message=update+not+successful&";
}
}
}
$_SESSION['username'] = $user;
$_SESSION['credit'] = $ccnumber;
$_SESSION['snum'] = $snum;
$_SESSION['sname'] = $sname;
$_SESSION['suburb'] = $suburb;
$_SESSION['pcode'] = $pcode;
$_SESSION['country'] = $country;
?> 

Here is the code I use to create the table

//create tables
$query = "CREATE TABLE IF NOT EXISTS customers (
  cid int(2) NOT NULL auto_increment,
  FName varchar(30) default NULL,
  LName varchar(30) default NULL,
  Email varchar(50) default NULL,
  Streetname varchar(20) default NULL,
  Housenum char(3) default NULL,
  Suburb varchar(20) default NULL,
  Postcode varchar(6) default NULL,
  Country varchar(20) default NULL,
  Phone varchar(10) default NULL,
  Username varchar(10) default NULL unique,
  Password varchar(8) default NULL,
  Credit_Card_Number varchar(20) default NULL,
  PRIMARY KEY  (cid)
) TYPE=MyISAM"; 

For some reason this user define message "You must enter a number greater then 0!" keeps on occurring although, I enter a number greater than "0".

Thanks,


Nightwalker