Database insert

[loureiro]

Hi, Im having some problems with inserting some information to a database. here is what it says is my error:

Parse error: parse error, unexpected '\"', expecting T_STRING or T_VARIABLE or T_NUM_STRING in C:...\process.php on line 87

now this is line 87:

$query = "INSERT INTO Customer VALUES ('10001', $POST["Name"], $POST["Address"], $POST["City"], $POST["State"], $POST["Country"], $POST["Email"], $POST["Phone"], $POST["Cell"], $POST["Fax"], $POST["Title"], $POST["Picture"], $POST["Signature"], $POST["Link1"], $POST["Link2"], $POST["Link3"], $POST["Link4"], $POST["Comments"], $POST["DistribNum"], $POST["SponsorName"], $POST["Package"], $POST["Version"], $POST["Design"], 'no', 'no', '', '', '')";

can anyone help me out? thanks!

[YappyDog]

I'm not going to redo your entire query, but you need to get the $_POST stuff outside the double quotes and then concatenate the pieces together. Sort of like:

$query = "INSERT INTO Customer VALUES ('10001', " . $POST["Name"] . ", " . $POST["Address"] .

You probably also need to add in single quotes around some of the data. Like:

$query = "INSERT INTO Customer VALUES ('10001', '" . $POST["Name"] . "', '" . $POST["Address"] .

[jweissig]

Hi,

You might also want to create a function that will handle all this input for you. The reason for this is what happens when someone places a “ in your input, they just killed you insert.

Thanks,
- Justin