so I have a form on form.php
php--------------
<?php
$fontO = '<font face="Verdanna,Helvetica" color="#00ee99" size="4">';
$fontC = '</font>';
echo '<TABLE width="550" align="center" border="0">';
echo '<TR><TD><IMG SRC="images/list.jpg" WIDTH="550" HEIGHT="61" BORDER=0 ALT=""></TD>';
echo '</TR></TABLE><TABLE width="550" align="center" bgcolor="E1E1E1">';
echo '<FORM METHOD=GET ACTION="complete.php">';
echo '<tr><td align="left">Company Name</td><td align="center"><INPUT TYPE="text" NAME="company"></td></tr>';
echo '<tr><td align="left">Address</td><td align="center"><INPUT TYPE="text" NAME="address"></td></tr>';
echo '<tr><td align="left">Phone #</td><td align="center"><INPUT TYPE="text" NAME="phone" ></td></tr>';
echo '<tr><td align="left">Contacts</td><td align="center"><INPUT TYPE="text" NAME="contact"></td></tr>';
echo '</font><tr><td align="left"><INPUT TYPE="submit" value="Add Info"></td>';
echo '<td align="left"><INPUT TYPE="reset" value="Refresh"></td></tr>';
echo '</FORM></TD></TR></TABLE>';
?>
then on complete.php
PHP------------------
<?php
$company = $HTTP_GET_VARS['company'];
$address = $HTTP_GET_VARS['address'];
$phone = $HTTP_GET_VARS['phone'];
$contact = $HTTP_GET_VARS['contact'];
$db_host = "localhost";
$db_base = "youngcanadian_com";
$table_name = "business_directory";
$db_user = "user";
$db_pass = "pass";
mysql_connect($db_host, $db_user, $db_pass)
or die("Could not connect: " . mysql_error());
mysql_select_db('business_directory');
mysql_query ("INSERT INTO business_directory (company, address, phone, contact) VALUES ('$company', '$address', '$phone', '$contact')");
print "successful entry";
mysql_close();
?>
is this wrong?
please help