Data not submitting to sql database

deltaforce229

Can someone help me with this the data wont submit to the sql database

php code:

if (isset($_POST['submit']) && $_POST['site'] && $_POST['password'] && $_POST['email']) {
    //VARIABLES START
    $content = stripslashes(trim($_POST['site']));
    $pw = stripslashes(trim($_POST['password']));
    $es = stripslashes(trim($_POST['email']));
    $sql = "INSERT INTO `subdomain` (`site`, `site2`) VALUES ($content, $content)";
    //VARIABLES END

//SQL START
mysql_connect("localhost","delta_delta","r******") or die ("Cant connect to db");
mysql_select_db("delta_main") or die ("Cant select db");
mysql_query($sql);
mysql_close();
//SQL END

Form:

<form action="" method="POST">
<table border="0" width="60%">
    <tr><td align="center">Subdomain<br><input type="text" name="site" size="50"></td></tr>
    <tr><td align="center">Ftp Password<br><input type="text" name="password" size="50"></td></tr>
    <tr><td align="center">email<br><input type="text" name="email" size="50"></td></tr>
</table>
<input type="submit" name="submit" value="submit">
</form>

vaaaska

Echo out your $sql variable to see what you are getting (stripslashes may or may not do what you need depending upon your setup). And, is it possible that your $content variable contains any single or double-quotes?

khendar

Wouldn't you need to enclose the $content fields in single quotes in the query and use addslashes rather than stripslashes to escape any single quotes in the variables before inserting them ??

deltaforce229

i echo'd the sql value and got this:

INSERT INTO subdomain (site, site2) VALUES (test, test)

so its not a problem of the values not being there its a problem of them not being submited

khendar

They are not being submitted because they are not enclosed in single quotes.

deltaforce229

yup you were right thanks. i just put single quotes in:

$sql = "INSERT INTO subdomain (site, site2) VALUES ('$content', '$content')";