Form to database

[prcollin]

I created a decent form how do i get it to post to a database i created in phpmyadmin mysql.  This is what i had to connect

 

function connect() {

global $servername, $username, $password, $dbname;

$dbconn = mysql_connect($servername, $username, $password) or die(mysql_error());

$select = mysql_select_db($dbname, $dbconn) or die(mysql_error())

 

and I have a separate file called connect.php that defines the variables

 

$dbsettings = array(

"servername" => "localhost",

"username" => "prcblog_****",

"password" => "******",

"dbname" => "prcblog_******");

 

<?php;

[pocobueno1388]

You use an INSERT query.

 

<?php

$query = mysql_query("INSERT INTO table_name (col1, col2, col3)
VALUES ('$var1', '$var2', '$var3')")or die(mysql_error());

?>

[jchemie]

hi,

 

  Other than that, one more thing you need to do is call your connect function. dont forget to do that. you might end up struggling to get a connection 

[prcollin]

So given the script that i wrote already can any piece it together in a manner that would work please

ill be your friend

[Yesideez]

First define your array then passit to your function:

function connect($server,$user,$pass,$dbname) {
   $dbconn = mysql_connect($server, $user, $pass) or die(mysql_error());
   $select = mysql_select_db($dbname, $dbconn) or die(mysql_error())
  return $select;
}

 

Then presuming you've set your array call it using something like this:

$dbcon=connect($dbsettings['servername'],$dbsettings['username'],$dbsettings['password'],$dbsettings['dbname']);

 

EDIT: Forgot to add end brace for the function!

[prcollin]

did everything right and can click submit but still doesnt send to the database

 

do i have i have to specify a table name

 

[scarhand]

You use an INSERT query.

 

<?php

$query = mysql_query("INSERT INTO table_name (col1, col2, col3)
VALUES ('$var1', '$var2', '$var3')")or die(mysql_error());

?>

 

do not forget that when using INSERT and other things that allow users to edit/input information into your database that you properly protect yourself from SQL injections.

[prcollin]

You use an INSERT query.

 

<?php

$query = mysql_query("INSERT INTO table_name (col1, col2, col3)
VALUES ('$var1', '$var2', '$var3')")or die(mysql_error());

?>

 

do not forget that when using INSERT and other things that allow users to edit/input information into your database that you properly protect yourself from SQL injections.

 

 

lol how do i do that

[pocobueno1388]

Use mysql_real_escape_string() on all your use inputted variables that will be inserted into the database.

 

$var1 = mysql_real_escape_string($_POST['var1']);

 

Now it would be safe to insert the variable into the DB.

[prcollin]

Use mysql_real_escape_string() on all your use inputted variables that will be inserted into the database.

 

$var1 = mysql_real_escape_string($_POST['var1']);

 

Now it would be safe to insert the variable into the DB.

 

where should that go in my script as compared to the connect() function

[Yesideez]

Place that at the start of your script where you get the contents of your form. You don't need to use this on numbers - I use this when I'm expecting numbers:

$num=intval($_POST['number']);