$query = "INSERT INTO customer VALUES (" .
"\"" . $formVars["surname"] . "\", " .
"\"" . $formVars["firstName"] . "\", " .
"\"" . $formVars["title"] . "\", " .
"\"" . $formVars["address1"] . "\", " .
"\"" . $formVars["address2"] . "\", " .
"\"" . $formVars["city"] . "\", " .
"\"" . $formVars["state"] . "\", " .
"\"" . $formVars["zipcode"] . "\", " .
"\"" . $formVars["country"] . "\", " .
"\"" . $formVars["phone"] . "\", " .
"\"" . $formVars["fax"] . "\", " .
"\"" . $formVars["email"] . "\", " .
$dob . ", " . 0 . ")";
//I prefer something like this:
// just make it's the ones you want by usinga key list
foreach($formVARS as $key=>$value)
{
$fields[$key] = $key;
$values[$key] = $value;
}
$set = "`" . explode("`, `", $fields) . "`";
$values = "'" . explode("', '", $values) . "'";
$SQL = "INSERT INTO `customer` (" . $set . ") VALUES (" . $values . ");";
echo $SQL;
I like to get a list of fields from the DB.
Generate a key list from that.
Prepare all my values.
Then in my loop, I check to make sure the current one is in the key list. If it is, I do what you see, if not I just skip it.