How do I know data is being inputted into the database?

[jazza96]

Hi

Firstly I am new to programming so go easy on me  

 

I am building a page where the user inputs text into a table called 'products'. This is the code I am using:

	$productname=$_POST['productname'];
	$productprice=$_POST['productprice'];
	$productpostage=$_POST['productposage'];
	$productquick=$_POST['productquick'];
	$productdescription=$_POST['productdescription'];
	$productdelivery=$_POST['productdelivery'];
	mysql_connect('localhost', 'username', 'password') or die(mysql_error());
	mysql_select_db('Kanga') or die(mysql_error());
	mysql_query("INSERT INTO 'product' VALUES ('$productname', '$productprice', '$productpostage', '$productquick', '$productdescription', '$productdelivery')");
		print "$productname has been added to the database.";
?>

When I press the submit button on the form, I get "Hello world(this is what i entered into the productname field) has been added to the database."

 

I am using phpmyadmin, so should all the data that is submitted show up in there? 

 

Thanks

 

Jarrod

[requinix]

You'll get that message regardless of whether the query works. You need to check the return value of mysql_query(): it will return true for success and false for failure.

But that only checks whether the query successfully ran - not whether the query inserted any records. Use mysql_affected_rows for that.

 

You're starting off, right? Don't use the mysql extension and mysql_* functions. They're old and slow and not as good as the alternatives: PDO or mysqli. Look into both and decide which you'd rather use (the overall style is similar but there are a few differences here and there).

[jazza96]

You'll get that message regardless of whether the query works. You need to check the return value of mysql_query(): it will return true for success and false for failure.

But that only checks whether the query successfully ran - not whether the query inserted any records. Use mysql_affected_rows for that.

 

You're starting off, right? Don't use the mysql extension and mysql_* functions. They're old and slow and not as good as the alternatives: PDO or mysqli. Look into both and decide which you'd rather use (the overall style is similar but there are a few differences here and there).

 

If I use MYSQLi, do I just add the 'I' after the MYSQL? 

[requinix]

No, they're two different things. First came mysql and later came mysqli ("mysql improved") so they're related, but they're still different.

[CroNiX]

Just look up the mysqli functions on php.net. They show the proper use.

[maxxd]

IMO, skip MysqlI and look into PDO - it's easier to use with prepared statements and parameter binding. The queries you've written are wide open to SQL injection. Using prepared statements will mitigate that risk.