Coding error : mysql_real_escape_string

[RON_ron]

Could someone tell what's wrong here?

 

$abc =sprintf("INSERT INTO my_db1 (username, password, firstname, company, email) VALUES ('%s', '%s', '%s', '%s', '%s'", mysql_real_escape_string($username), mysql_real_escape_string($password, mysql_real_escape_string($surname, mysql_real_escape_string($firstname, mysql_real_escape_string($company, mysql_real_escape_string($email)));
$resultg = mysql_query($abc);

 

Thanks!

[mikecampbell]

mysql_real_escape_string($password, mysql_real_escape_string($surname, mysql_ ...

 

It looks like you're missing some brackets.

[RON_ron]

Thanks. But the adding the missing brackets did not solve the issue.

 

$abc =sprintf("INSERT INTO my_db1 (username, password, firstname, company, email) VALUES ('%s', '%s', '%s', '%s', '%s'", mysql_real_escape_string($username), mysql_real_escape_string($password), mysql_real_escape_string($surname), mysql_real_escape_string($firstname), mysql_real_escape_string($company), mysql_real_escape_string($email)));
$resultg = mysql_query($abc);

 

[mikecampbell]

It would be helpful to know in what way it isn't working, and what error message you're getting.

[OldWest]

Is your database connection working OK? Yeah you really need to post the error message up here.

[robert_gsfame]

What error shown up??

$abc =sprintf("INSERT INTO my_db1 (username, password, firstname, company, email) VALUES ('%s', '%s', '%s', '%s', '%s'", mysql_real_escape_string($username), mysql_real_escape_string($password), mysql_real_escape_string($surname), mysql_real_escape_string($firstname), mysql_real_escape_string($company), mysql_real_escape_string($email)));

$resultg = mysql_query($abc);

 

this is what i notice...try this

$abc =sprintf("INSERT INTO my_db1 (username, password, firstname, company, email) VALUES ('%s', '%s', '%s', '%s', '%s')",

mysql_real_escape_string($username),

mysql_real_escape_string($password),

mysql_real_escape_string($surname),

mysql_real_escape_string($firstname),

mysql_real_escape_string($company),

mysql_real_escape_string($email));

$resultg = mysql_query($abc);

 

surely it works!