Problem with mysqli_real_escape_string ()

[ozhaq]

Hi everyone,

 

The problem is very basic. Here is the code I am using to insert data from a HTML form into database

 

<?php

$con=mysqli_connect("localhost","ozair","abcd1234","test");

// Check connection

if (mysqli_connect_errno())

{

  echo "Failed to connect to MySQL: " . mysqli_connect_error();

}

 

// escape variables for security

$firstname = mysqli_real_escape_string($_POST['firstname']);

$lastname = mysqli_real_escape_string($_POST['lastname']);

$age = mysqli_real_escape_string($_POST['age']);

 

$sql="INSERT INTO persons (FirstName, LastName, Age)

VALUES ($firstname, $lastname, $age)";

 

if (!mysqli_query($con,$sql))

{

  die('Error: ' . mysqli_error($con));

}

echo "1 record added";

 

mysqli_close($con);

?>

 

Table is already created successfully. Connection is ok but when I hit the "submit" from my HTML form I get this error

 

arning: mysqli_real_escape_string() expects exactly 2 parameters, 1 given in C:\wamp\www\Energy Manager\insert.php on line 10

 

arning: mysqli_real_escape_string() expects exactly 2 parameters, 1 given in C:\wamp\www\Energy Manager\insert.php on line 11

 

arning: mysqli_real_escape_string() expects exactly 2 parameters, 1 given in C:\wamp\www\Energy Manager\insert.php on line 12

 

Please help

 

regards,

ozair

[gristoi]

should be 

mysqli_real_escape_string($con, $_POST['age']);

[Ch0cu3r]

Also the values in the sql query needs to be wrapped in quotes

$sql="INSERT INTO persons (FirstName, LastName, Age)
VALUES ('$firstname', '$lastname', '$age')";

[ozhaq]

 

gristoi and Ch0cu3r thanks a lot. It worked.