Submit form to Mysql & Email

[nagger]

Hi guys,

The code below is what I am using to try and submit the content of a form to a mysql database and also email the form results at the same time. Unfortunately it is doing neither! Can anyone shed any light on the problem please?

<?php

// sql
$con = mysql_connect("database.XXX.com","XXXXXX","XXXXXXXXX");
if (!$con)
{
   die('Could not connect: ' . mysql_error());
}
mysql_select_db("XXXXXXX_com_db", $con);$sql="INSERT INTO Enquiries (hear, name, email, contact, Schoolorcollege, date)
VALUES
('$_POST[hear]','$_POST[name]','$_POST[email]','$_POST[contact]','$_POST[Schoolorcollege]','$_POST[date]')";

$_POST['SQL_query_result'] = 'Success';
if (!mysql_query($sql,$con))
{
   $_POST['SQL_query_result'] = 'Database Error';
}

// mail
$to = '[e-mail]';
$subject = 'Request Form';
$crlf = "\n";

$headers =
    'MIME-Version: 1.0'.$crlf.
    'From: '.$from.$crlf.
    'Content-type: text/plain; charset=iso-8859-1'.$crlf;

foreach($_POST as $key => $val)
{
    $key = str_replace('_', ' ', $key);
    $message .= $key .' '. $val . $crlf;

}

mail($to, $subject, $message);

// confirm
if ($_POST['SQL_query_result'] = 'ok')
{
      mysql_close($con);
header('Location: dbas/thanks.php');
exit;
}
else
{
   die('Error: ' . mysql_error());
}

[coldwerturkey]

an or die(mysql_error()) on your mysql_query() will tell you why it's not inserting..

$message isn't defined before using $message .= (you're adding to a var that doesn't exsist)

If you're still hving troubles try turning on your errors ini_set('display_errors', 1); error_reporting(E_ALL); if they're not already on

Why do you have $headers defined if you're not going to use them?

you should ALWAYS be using mysql_real_escape_string() when entering any user supplied data into a database.

also there's no oppertunitie in the code you posted for $_POST['SQL_query_result'] to equal 'ok', so your mysql_close() and header() redirect in your last if statement won't ever be called to

[djjjozsi]

you've created the header, but did not inserted into the mail

Lets validate the user's details before you insert into a database.

If the user missed the $_POST["mail"] variable, then you wanted to use it, in some cases makes undefied index warning message, before a header location function this is not that you really need.

Hello, jjozsi.