[sebwerner2]

So i put a quote around the names on all the VARCHAR feilds?

[Dormilich]

that would be a start.

[sebwerner2]

raghav.naganathan, on 28 December 2012 - 02:10 AM, said:

sebwerner2, on 28 December 2012 - 02:35 PM, said:

it works with numbers...

You mean to say day, month and year works with numbers right?...that is because you have given the datatype as int

regards,
Raghav

No, the VARCHAR fields only work with numbers, not letters at all...

[Dormilich]

question, why do you have separate fields for day/month/year? you can easily get those out of SQL (date functions!) and additionally SQL can do date calculations on a proper DATE field.

[sebwerner2]

Dormilich, on 28 December 2012 - 03:10 AM, said:

that would be a start.

I tried, unfortunately it didnt work...
But how do i put quotes around a variable?

[Dormilich]

sebwerner2, on 28 December 2012 - 11:16 AM, said:

But how do i put quotes around a variable?

is that a trick question?

$ex = "some '$quotes' in a string";

[sebwerner2]

Dormilich, on 28 December 2012 - 03:20 AM, said:

sebwerner2, on 28 December 2012 - 11:16 AM, said:

But how do i put quotes around a variable?

is that a trick question?

$ex = "some '$quotes' in a string";

hahah xD No i really didnt knew, but hey thanks! U really learn somthing new everyday, eh?

[sebwerner2]

I have no idea Nothing seems to work, i've tried every thing u guys said, and i appriciate it, i really do!

[Dormilich]

what is the current state of code?

[sebwerner2]

<?php
//Database login information
$mysql_host="****";
$mysql_username="****";
$mysql_password="****";
$mysql_database_name="****";

//Textbox information
$name=$_POST['name'];
$surename=$_POST['surename'];
$day=$_POST['day'];
$month=$_POST['month'];
$year=$_POST['year'];
$gender=$_POST['gender'];
$report=$_POST['raport'];

// Make a MySQL Connection
mysql_connect($mysql_host, $mysql_username, $mysql_password) or die(mysql_error());
mysql_select_db($mysql_database_name) or die(mysql_error());

// Insert a row of information into the table "report"
mysql_query("INSERT INTO report(firstname,surename,day,month,year,gender,report) VALUES('$name', '$surename', '$day', '$month', '$year', '$gender', '$report')") or die(mysql_error());  

//Suceeed message
echo "Data Inserted!";

?>

iI've quoted the variables />

This post has been edited by Dormilich: 28 December 2012 - 03:42 AM

[Dormilich]

sebwerner2, on 28 December 2012 - 11:39 AM, said:

I've quoted the variables

including the numbers, which go without quotes.

[sebwerner2]

Dormilich, on 28 December 2012 - 03:44 AM, said:

sebwerner2, on 28 December 2012 - 11:39 AM, said:

I've quoted the variables

including the numbers, which go without quotes.

Omfg! It worked! Thank you so much man! It actually did! Im so happy, iv'e been struggeling with this for 4-5 hours now D:

[Dormilich]

so, and now for the SQL injection problem …

[sebwerner2]

Now i will make a login system, and a table to show the MySql table, in a list or something!

[Dormilich]

first you need to get rid of the SQL Injection problem.