Problem with Insert

[Rollo_Tamasi]

This is the processing i'm using for a form to input a few fields into a database.

<?php

include 'db.php';

if (isset($_POST['submit'])) {

$month = htmlspecialchars(strip_tags($_POST['month']));
$date = htmlspecialchars(strip_tags($_POST['date']));
$year = htmlspecialchars(strip_tags($_POST['year']));
$time = htmlspecialchars(strip_tags($_POST['time']));
$title = htmlspecialchars(strip_tags($_POST['title']));
$category = htmlspecialchars(strip_tags($_POST['category']));
$entry = $_POST['entry'];

$timestamp = strtotime($month . " " . $date . " " . $year . " " . $time);

$entry = nl2br($entry);

if (!get_magic_quotes_gpc()) {
    $title = addslashes($title);
    $entry = addslashes($entry);
}



$sql = "INSERT INTO php_blog (timestamp,title,category,entry,) VALUES ('$timestamp','$title','$category','$entry')";

$result = mysql_query($sql) or print("Can't insert into table php_blog.<br />" . $sql . "<br />" . mysql_error());

if ($result != false) {
    print "Your entry has successfully been entered into the database.";
}

mysql_close();
}
?>

<?php
$current_month = date("F");
$current_date = date("d");
$current_year = date("Y");
$current_time = date("H:i");

?>

I got the following sql error:

Can't insert into table php_blog.
INSERT INTO php_blog (timestamp,title,category,entry,) VALUES ('1152118140','Test','','')
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ') VALUES ('1152118140','Test','','')' at line 1

There are 4 fields on the form. The first is a timestamp, second is a title, third is the category and final is the actual entry.

And then this is the form:

<form method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>">

<p><strong><label for="month">Date (month, day, year):</label></strong> 

<select name="month" id="month">
<option value="<?php echo $current_month; ?>"><?php echo $current_month; ?></option>
<option value="January">January</option>
<option value="February">February</option>
<option value="March">March</option>
<option value="April">April</option>
<option value="May">May</option>
<option value="June">June</option>
<option value="July">July</option>
<option value="August">August</option>
<option value="September">September</option>
<option value="October">October</option>
<option value="November">November</option>
<option value="December">December</option>
</select>

<input type="text" name="date" id="date" size="2" value="<?php echo $current_date; ?>" />

<select name="year" id="year">
<option value="<?php echo $current_year; ?>"><?php echo $current_year; ?></option>
<option value="2004">2004</option>
<option value="2005">2005</option>
<option value="2006">2006</option>
<option value="2007">2007</option>
<option value="2008">2008</option>
<option value="2009">2008</option>
<option value="2010">2010</option>
</select>

<strong><label for="time">Time:</label></strong> <input type="text" name="time" id="time" size="5" value="<?php echo $current_time; ?>" /></p>

<p><strong><label for="title">Title:</label></strong> <input type="text" name="title"  size="40" />
  <br>
  Category
  <select name="select" id="category">
    <option value="House">House</option>
    <option value="Techno">Techno</option>
    <option value="Indie">Indie</option>
    <option value="Urban">Urban</option>
  </select>
</p>

<p><textarea cols="80" rows="20" name="entry" id="entry"></textarea></p>

<p><input type="submit" name="submit" id="submit" value="Submit"></p>

</form>

I'm not sure why i'm getting the error.

[Scarum]

Interesting... But I think it's because of the extra comma you've put in.
It should be:

$sql = "INSERT INTO php_blog (timestamp,title,category,entry) VALUES ('$timestamp','$title','$category','$entry')";

And not:

$sql = "INSERT INTO php_blog (timestamp,title,category,entry,) VALUES ('$timestamp','$title','$category','$entry')";

Also, instead of using print on the line below, use die, or the script'll carry on anyway. Let me know if it doesn't work.

[Rollo_Tamasi]

thanks i missed that!
The category field doesn't post to the database though 😕