Insert function not working

[pcristian43]

Hello all, so I created an insert function and it seems no matter what I try that it won't add values using the query function inside a table from the respective variables, I would like to know why is this happening? Here is the code can you tell me why it doesn't insert anything in the database? It shows no errors when it runs but then again when I check the tables they're empty!

function insert(){
				$user = $_POST['user'];
				$pass = md5($_POST['pass']);
				$priv = "User";
				$mail = $_POST['mail'];
				$avatar = $_FILES['avatar']['name'];
				$date="now()";
				$submit = $_POST['submit'];
			
			
				$query = "INSERT INTO user(user,pass,priv,mail,avatar,date) VALUES(`$user`,`$pass`,`$priv`,`$mail`,`$avatar`,`$date`);";
				if($submit){
					$res = mysqli_query($con,$query) or die(mysqli_error($con));
				}
				
				
			}

[PravinS]

remove the back ticks (``) from VALUES of INSERT query and use single quotes (' ')

$query = "INSERT INTO user(user,pass,priv,mail,avatar,date) VALUES('$user','$pass','$priv','$mail','$avatar','$date')";

may this works for you

[pcristian43]

remove the back ticks (``) from VALUES of INSERT query and use single quotes (' ')

$query = "INSERT INTO user(user,pass,priv,mail,avatar,date) VALUES('$user','$pass','$priv','$mail','$avatar','$date')";

may this works for you

I tried that already, even escaping strings, it still shows nothing inside the table. The only thing that executes is the CREATE TABLE statement

[cyberRobot]

Have you tried adding some debugging statements to see if the query is even being executed? You could do something like this, for example:

<?php
if($submit){
    echo '<div>Executing Query</div>';
    $res = mysqli_query($con,$query) or die(mysqli_error($con));
} else {
    echo '<div>Query Skipped</div>';
}
?>

 

If the "Query Skipped" message is displayed, try echoing the contents of the $_POST array to see if it contains a value for "submit".

echo '<pre>' . print_r($_POST, true) . '</pre>';

 

[Barand]

now() shouldn't have quotes round it in the query

[pcristian43]

now() shouldn't have quotes round it in the query

If it doesn't its seen as a php function instead of SQL one, that's why I placed the quotes.

[pcristian43]

The script also shows me this error message:

Warning: mysqli_query() expects parameter 1 to be mysqli, null given in on line 50. Line 50 is the $res variable.

[ginerjm]

$con is not in scope inside your function.  Either make it global or pass it in as a function parameter

And - I think you want to remove the single quotes from the value $date.  And - you probably need backticks on the field name date since date is probably a reserved word

Edited May 28, 2014 by ginerjm

[Ch0cu3r]

Correction to ginerjm post

$con is not in scope inside your function.  Either make it global or pass it in as a function parameter

 

Read the manual on how to use function arguments