[SOLVED] Register form help please

[forumnz]

My form correctly submits the right fields to the register-process.php for validation and to insert into db.

Problem is, the username, fname and lname are coming up blank. It worked once (and inserted a blank username, fname and lname into the db, but now won't because it's still inserting blank fields which already exist).

 

Please help,

Sam.

 

Code:

<?php
//Start session
session_start();

//Array to store validation errors
$errmsg_arr = array();

//Validation error flag
$errflag = false;

	include('connectdb.php');


//Function to sanitize values received from the form. Prevents SQL injection
function clean($str) {
	if(!get_magic_quotes_gpc()) {
		$str = @trim(mysql_real_escape_string($str));
	}
	else {
		return @trim($str);
	}
}

//Sanitize the POST values
$fname = clean($_POST['fname']);
$lname = clean($_POST['lname']);
$login = clean($_POST['login']);
$password = clean($_POST['password']);
$cpassword = clean($_POST['cpassword']);

//Input Validations

//Check for duplicate login ID
$qry = "SELECT count(*) AS c FROM ffusers WHERE login='$login'";
$result = mysql_query($qry);
if($result) {
	$result_array = mysql_fetch_assoc($result);
	if($result_array['c'] > 0) {
		$errmsg_arr[] = 'Login ID already in use';
		$errflag = true;
	}
	@mysql_free_result($result);
}
else {
	die("Query failed");
}

//If there are input validations, redirect back to the registration form
if($errflag) {
	$_SESSION['ERRMSG_ARR'] = $errmsg_arr;
	session_write_close();
	header("location: register-form.php");
	exit();
}

//Create INSERT query
$qry = "INSERT INTO ffusers(firstname, lastname, login, passwd) VALUES('$fname','$lname','$login','".md5($_POST['password'])."')";
$result = mysql_query($qry);
//Check whether the query was successful or not
if($result) {
	header("location: register-success.php");
	exit();
}else {
	die("Query failed");
}
?>

[burnside]

replace this this line :

 

 
$qry = "INSERT INTO ffusers(firstname, lastname, login, passwd) VALUES('$fname','$lname','$login','".md5($_POST['password'])."')";

 

put a space in between VALUES(etc ........

 

so its

 

VALUES (etc ......