Drop Down Menu

[bobicles2]

Ok so i have a HTML form seen below, which is linked to the file insert.php also seen below, when i enter the information all the text i enter goes into my database but the options i select from the drop down menu do not,

 

can someone help?

thanks

 

 

ADDEVENT.HTML

   <form name="form2" method="post" action="insert.php">
      <td><table width="100%" border="0" cellpadding="3" cellspacing="1" bgcolor="#DBDBDB">
        <tr>
          <td colspan="3"><p align="center"><strong>Add Event </strong></p>
            <p> </p></td>
        </tr>
        <tr>
          <td width="59">Event</td>
          <td width="4">:</td>
          <td width="239"><input type="text" name="Event" /></td>
        </tr>
        <tr>
          <td>Genre</td>
          <td>:</td>
          <td><select name="genre" id="genre">
          <option selected="selected">Genre</option>option
          <option value="Rock">Rock</option>
          <option value="Pop">Pop</option>
          <option value="Indie">Indie</option>
          <option value="Electro">Electro</option>
          </select>
          </td>
        </tr>
        <tr>
          <td>Date</td>
          <td>:</td>
          <td>
          <select name="Year">
              <option selected="selected">Year</option>
              <option value="2010">2010</option>
              <option value="2011">2011</option>
              <option value="2012">2012</option>
              <option value="2013">2013</option>
              <option value="2014">2014</option>
              <option value="2015">2015</option>
              <option value="2016">2016</option>
              <option value="2017">2017</option>
              <option value="2018">2018</option>
              <option value="2019">2019</option>
              <option value="2020">2020</option>
              <option value="2021">2021</option>
              <option value="2022">2022</option>
              <option value="2023">2023</option>
              <option value="2024">2024</option>
              <option value="2025">2025</option>
              <option value="2026">2026</option>
              <option value="2027">2027</option>
              <option value="2028">2028</option>
              <option value="2029">2029</option>
              <option value="2030">2030</option>
            </select>
             <select name="Month">
              <option selected="selected">Month</option>
              <option value="01">01</option>
              <option value="02">02</option>
              <option value="03">03</option>
              <option value="04">04</option>
              <option value="05">05</option>
              <option value="06">06</option>
              <option value="07">07</option>
              <option value="08">08</option>
              <option value="09">09</option>
              <option value="10">10</option>
              <option value="11">11</option>
              <option value="12">12</option>
            </select>
            <select name="Day">
            <option selected="selected">Day</option>
            <option value="01">01</option>
            <option value="02">02</option>
            <option value="03">03</option>
            <option value="04">04</option>
            <option value="05">05</option>
            <option value="06">06</option>
            <option value="07">07</option>
            <option value="08">08</option>
            <option value="09">09</option>
            <option value="10">10</option>
            <option value="11">11</option>
            <option value="12">12</option>
            <option value="13">13</option>
            <option value="14">14</option>
            <option value="15">15</option>
            <option value="16">16</option>
            <option value="17">17</option>
            <option value="18">18</option>
            <option value="19">19</option>
            <option value="20">20</option>
            <option value="21">21</option>
            <option value="22">22</option>
            <option value="23">23</option>
            <option value="24">24</option>
            <option value="25">25</option>
            <option value="26">26</option>
            <option value="27">27</option>
            <option value="28">28</option>
            <option value="29">29</option>
            <option value="30">30</option>
            <option value="31">31</option>
          </select>
                      
            </td>
        </tr>
        <tr>
          <td>Price</td>
          <td>:</td>
          <td><input type="text" name="Price" /></td>
        </tr>
        <tr>
          <td>Tickets</td>
          <td>:</td>
          <td><input type="text" name="Tickets" /></td>
        </tr>
        <tr>
          <td> </td>
          <td> </td>
          <td><input type="submit" name="Submit" value="Submit" /></td>
        </tr>
      </table></td>
    </form>

 

INSERT.PHP

<?php
$con = mysql_connect("localhost","teamrend_rwowen","291Aug89");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("teamrend_rwowen", $con);

$sql="INSERT INTO Events (Event, Genre, Date, Price, Venue, Tickets)
VALUES
('$_POST[Event]','$_POST[Genre]','$_POST[Date]','$_POST[Price]','$_POST[Venue]','$_POST[Tickets]')";

if (!mysql_query($sql,$con))
  {
  die('Error: ' . mysql_error());
  }
echo "Thank You, Your Event has now been added to our Records";

mysql_close($con)
?> 

[ChemicalBliss]

[1] - HTML FIX -

 

Forgot a Value:  <option selected="selected">Genre</option>option

should be:  <option selected="selected" value="none">Genre</option>

 

[2] - PHP Fix -

When you use POST variables, i reccomend using this syntax: $_POST['genre'] rather than $_POST[genre], otherwise things get messy quickly.

 

Make sure your POST Names are EXACTLY the same (including case) as the FORM Names.

 

[3] - PHP Security -

Never put POST variables directloy in a query statement, i can delete your database by doing so. Use "mysql_real_escape_string" on every client input used in the query (this will make it safe), mysql_real_escape_string only works if there is an active connection to a mysql database.

 

-CB-

[bobicles2]

will test shortly, no internet connection on laptop where im coding stuck on a rubbish uni pc right now

 

thanks for the help CB always appreciate it! going to google the real escape string now as i dont entirely understand it or where to put it