inserting. with mysql

maluh13

I am having problems inserting things to my database table... I have to insert into the table the values of 2 input text, how do i refer to them in my code?? and where should I write that code? by the submit button??

thanks

roscor

take a look at this, I googled 'insert data from form into mysql' which gave 702,000 hits. Its a good place to start.

http://www.w3schools.com/php/php_mysql_insert.asp

maluh13

thank you! It helped me a lot, now I can insert things in my database.. the only problem is that it is not being displayed in my page, is this code wrong?

$query = "SELECT event
FROM events
WHERE date = '$year'-'$month'-'$d'"; // here I am trying to compare the date of the data in my table with the values of those variables, is is ok?? i also had i as date='$year-$month-$d'...

$result = mysql_query($query);
while ($row=mysql_fetch_assoc($result)){
echo $row['event'];
}

roscor

use

//where date is set to the variable $date from your form
$date = $_POST['day'] . "-" . $_POST['month'] . "-" . $_POST['year'];
//gives date e.g. 21-09-1987


then

 $query = "SELECT event FROM events WHERE date = '$date' ASC";
//use ASC or DESC for results to be returned Ascending or Descending 
//use error reporting (or die(mysql_error());) to highlight any problems, search error reporting E all for further advice

$result = mysql_query($query) or die(mysql_error());

while ($row=mysql_fetch_assoc($result)){
echo $row['event'];

bradgrafelman

Note that the code roscor provided shouldn't work (if it does you've not used proper data types); instead, this should work:

$date = mysql_real_escape_string($_POST['year'] . '-' . $_POST['month'] . '-' . $_POST['day']);

Also, you should never place user-supplied data directly into a SQL query without first sanitizing it with a function such as [man]mysql_real_escape_string/man (as I did in my code snippet above).