"insert into" will not work

[desertdirk]

I can not get this to do anything. This is called from the submit form page. This page is brought up in the browser, but I get nothing else. no data is entered into the database, and I get no errors.
I am trying this on my home computer running WinXP, IIS

The html portion of the code (not included) confirms the insertion, but like I say, I get a blank page.

Any Ideas at all?

<?
session_start();
if ($_SESSION[valid] != "yes") {
header("Locationhttp://localhost/test/member_menu.php");
exit;
}
$db_name = "members";
$table_name = "chamber_members";

$connection = mysql_connect("localhost", "username", "password") or die(mysql_error());

$db = mysql_select_db($db_name, $connection) or die(mysql_error());

$sql = "INSERT INTO $table_name (id, f_name, l_name, b_name, mail_address, bus_address, city, state, zip, bus_type, web_address) VALUES (' ', '$POST[f_name]', '$POST[l_name]', '$POST[b_name]', '$POST[mail_address]', '$POST[bus_address]', '$POST[city]', '$POST[state]', '$POST[zip]', '$POST[bus_type]', '$POST[web_address]')";

$result = mysql_query($sql, $connection) or die(mysql_error());

?>

I should say that this works if I put the actual data in instead of using the variable "$_Post[]"

[cgraz]

If you add

print $sql . "<br>";

to your code, what does it print?

Cgraz

[desertdirk]

I get nothing--blank page

[cgraz]

Then you're doing it wrong. If you have a variable $sql with a string

$sql = "INSERT INTO $table_name (id, f_name, l_name, b_name, mail_address, bus_address, city, state, zip, bus_type, web_address) VALUES (' ', '$_POST[f_name]', '$_POST[l_name]', '$_POST[b_name]', '$_POST[mail_address]', '$_POST[bus_address]', '$_POST[city]', '$_POST[state]', '$_POST[zip]', '$_POST[bus_type]', '$_POST[web_address]')"; 

And you print that string

print $sql . "<br>";

You would never get a blank page.

Cgraz

[desertdirk]

ok
I cut an pasted into a new php file and got this:

INSERT INTO chamber_members (id, f_name, l_name, b_name, mail_address, bus_address, city, state, zip, bus_type, web_address) VALUES (' ', '', '', '', '', '', '', '', '', '', '')

When I put the print command in the original script, I put it as the last line before the closing ?>
and got a blank page.
DD

[desertdirk]

well
i took the example script, entered my variables and it works. I will have to go over it all again to see what I did wrong. I compared the two scripts earlier, but could not find anything. Guess I will have to look again.

Thanks anyway, cgraz

[andy85]

Hey,

Try setting your $_POST superglobals as:

$f_name = $POST['fname'];
$l_name = $POST['lname'];
$mail_address = $_POST['email'];

etc.. at the top of your code.

And in your query go:

VALUES (' ', '$f_name', '$l_name', '$b_name', '$mail_address'.. etc

I think that would help..

-andy

[cgraz]

you could also just cocatenate the variables to the string rather than setting new variables.

$sql = "INSERT INTO $table_name (id, f_name, l_name, b_name, mail_address, bus_address, city, state, zip, 
   bus_type, web_address) VALUES 
(' ', '".$_POST["f_name"]."', '".$_POST["l_name"]."', '".$_POST["b_name"]."', '".$_POST["mail_address"]".', '".$_POST["bus_address"]".', 
   '".$_POST["city"]."', '".$_POST["state"]."', '".$_POST["zip"]."', '".$_POST["bus_type"]."', '".$_POST["web_address"]."')";

Looks messier, especially since you have quite a few fields, but basically all you're doing is

". $var . "

And an even better way of doing this is by using a loop and building a dynamic query.

foreach($_POST as $key) {
   $keys[] = $key;
}

$query = "INSERT INTO your_table (" . implode(",", $keys) . ")";
$query .= " VALUES('" . implode("','", $_POST) . "')";

$result = mysql_query($query) or die(mysql_error());

Cgraz