[SOLVED] Problems with insert

[affordit]

I use the code below to verify fields are not empty and then insert the data into the proper tables. The insert worked fine untill I added the code at the top to  verify that the fields where not empty.

Now when I run it it inserts everything EXCEPT "SPHONE", "CATEGORY", "UPC", AND "BRAND".

 

Can someone see somthing I can't?

 

 

<?php

$bname=$_POST['bname'];

if (empty($bname))

{

echo"<a href='addproducts.php'>Enter Your Store Name</a>";

exit(); // stop exec here

}

 

$sphone=$_POST['sphone'];

if (empty($sphone))

{

echo"<a href='addproducts.php'>Enter Your Store Phone</a>";

exit(); // stop exec here

}

 

$category=$_POST['category'];

if (empty($category))

{

echo"<a href='addproducts.php'>Enter a Category</a>";

exit(); // stop exec here

}

 

$brand=$_POST['brand'];

if (empty($brand))

{

echo"<a href='addproducts.php'>Enter a Brand</a>";

exit(); // stop exec here

}

 

if

(isset($_POST['bname']) &&!empty($_POST['bname'])&&

isset($_SESSION['sphone']) &&!empty($_SESSION['sphone'])&&

isset($_POST['category']) &&!empty($_POST['category'])&&

isset($_POST['brand']) &&!empty($_POST['brand']) )

 

// don't worry about ID, it is checked for numeric ONLY

$bname=mysql_real_escape_string($bname) ;

$sphone=mysql_real_escape_string($sphone) ;

$category=mysql_real_escape_string($category) ;

$brand=mysql_real_escape_string($brand) ;

 

include("k_falls_dbinfo2.inc.php");

mysql_connect(mysql,$username,$password);

@mysql_select_db($database) or die( "Unable to select database");

 

$query = "INSERT INTO products VALUES ('','$bname','$sphone','$category','$upc','$brand','$model','$description','$extra','$price','$website')";

mysql_query($query);

 

 

#  if the user submitted a CATEGORY

if( isset($category) )

{

  #  get the user id 

  $id = mysql_insert_id( );

 

  #  and insert the CATEGORY details

  $query = "INSERT INTO categories VALUES ('','$category')";

  mysql_query($query);

}

if( isset($brand) )

{

  #  get the user id 

  $id = mysql_insert_id( );

  $query = "INSERT INTO brands VALUES ('','$brand')";

  $result = mysql_query( $query );

}

mysql_free_result( $result );

mysql_close();

// -----------------------------

(header("location: addproducts.php"));

if($result)

{

echo "Your information has been successfully added to the database.";

}

else

{

echo"hmm I sc...up!";

}

?>

 

<edit> fixed a {} </edit>

 

 

[adam291086]

you haven't posted any code

[affordit]

Sorry got ahead of myself

[revraz]

You should be getting a mysql error saying it can't perform a mysql_real_escape_string before you connect to the DB.

 

Also, you are checking if the fields are empty twice, why?

[affordit]

Not sure I was helped by a friend that knows a little more than I do.

Is there a way to fix it