You generally have to put string values in single-quotes, such that
INSERT into company VALUES('','{$_POST['company_name']}', // do other insert values like this....
Also, you might want to google search for SQL injection attacks--your code can easily permit malicious queries.
EDIT: Sorry didn't see your other post first. Anyway, make sure you make the above correction, and heed my comment on SQL injection.