Comments on: Inserting Data Into a MySQL Database using PHP

By: Thabiso Chizwe

Thabiso Chizwe — Fri, 10 Oct 2008 08:50:49 +0000

when i click submit the whole contents of my php file are displayed in the html page

here is my script

$Title= $_POST['Title'];
$FirstName= $_POST['FirstName'];
$Surname= $_POST['Surname'];
$JobTitle= $_POST['JobTitle'];
$Company=$_POST['Company'];
$Department= $_POST['Department'];
$Office= $_POST['Office'];
$BusinessPhone= $_POST['BusinessPhone'];
$HomePhone= $_POST['HomePhone'];
$Fax= $_POST['Fax'];
$Cell =$_POST['Cell'];
$Email = $_POST['Email'];
$WebPageAddress= $_POST['WebPageAddress'];
$PhysicalAddress= $_POST['PhysicalAddress'];
$MailingAddress= $_POST['MailingAddress'];
$Birthday= $_POST['Birthday'];
$month= $_POST['month'];
$year = $_POST['year'];

$conn = mysql_connect($dbhost, $dbuser, $dbpass) or die (”Error connecting to MySQL”);
mysql_select_db($dbname, $conn) or die (”Could not open database”);

$query=”INSERT INTO contacts(Title,FirstName,Surname,JobTitle,Company,Department,Office,BusinessPhone,HomePhone,Fax,Cell,Email,WebPageAddress,PhysicalAddress,MailingAddress,Birthday,month,year)VALUES(’”.$Title”‘, ‘”$FirstName”‘,’”$Surname”‘,’”$JobTitle”‘,’”$Company’”,’”.$Department’”,’”.$Office”‘,’”.$BussinessPhone’”,’”.$HomePhone’”,’”.$Fax”‘,’”$Cell”‘,’”.$Email”‘,’”.$WebPageAddress”‘,’”.$PhysicalAddress”‘,’”.$MailingAddress”‘,’”.$Birthday”‘,’”.$month”‘,’”.$year”‘)”;
mysql_query($query);
echo “Record Addedclick hereto return to contacts”;

$result = mysql_query($query);

mysql_close($db1);
mysql_close($conn);
echo “”;

By: Sanjeev

Sanjeev — Tue, 07 Oct 2008 08:03:12 +0000

this is sanjeev
i have written that code but i am not able to update data in my sql ,
i am getting the error.

Parse error: syntax error, unexpected T_VARIABLE in C:\xampp\htdocs\sandeep\update.php on line 9

pls help me

By: Christian

Christian — Thu, 02 Oct 2008 22:04:21 +0000

“sanitizing database inputs”

Okay, got it. Thanks . . . and funny cartoon.

By: John Ward

John Ward — Thu, 02 Oct 2008 20:28:41 +0000

Christina look up sanitizing database inputs. This will gt you started http://xkcd.com/327/ . Not sure about the radio buttons, echo the query and see if the value is being sent.

By: Christian

Christian — Thu, 02 Oct 2008 20:20:16 +0000

Thanks, John, for the response. Okay, I basically have it working now. You can fill out all the fields and it’ll populate the database. Only two problems remain (and they are minor compared to what I was facing before but still important):

1. If the user uses a character such as an apostrophe it prevents the database from populating.

2. It’s not populating the product field, which is the only field in this form that utilizes radio buttons.

By: Christian

Christian — Tue, 30 Sep 2008 19:59:51 +0000

Okay, I have an update and clarification. When I use:

the database does get populated. But when I use:

The database does not get populated and a blank screen appears.

By: John Ward

John Ward — Tue, 30 Sep 2008 19:23:50 +0000

Try either of these:

$query = ‘INSERT INTO clientsopennew (orderID, orderDate)VALUES (NULL,”$orderDate”)’;

$query = “INSERT INTO clientsopennew (orderID, orderDate)VALUES (NULL,’”.$orderdate.”‘)”;

By: John Ward

John Ward — Tue, 30 Sep 2008 19:17:49 +0000

Christian, try to echo your sql variable after you create it. Seems it is not creating a valid update.

By: Christian

Christian — Tue, 30 Sep 2008 18:41:57 +0000

Still no answer for my question.

By: Mike Maguire

Mike Maguire — Mon, 22 Sep 2008 02:05:41 +0000

Sasha:

Check out this tutorial that I wrote a while ago:

http://teamtutorials.com/photoshop-tutorials/web-graphics/sql-select-based-on-text-inserted-into-a-text-box

I think it is what you are looking for. Thanks.