problem in link DB with PHP "urgent"

Sweet

Hello every one

this is the first post for me, and i want some help from you 🙁

this is my problem >>

i have in my project "contact us" label, and i put this code in it,

<?php
include ("config.php");
$thedate=Date("y-m-d");
$fname=$_POST['fname'];
$email=$_POST['email'];
mysql_query("INSERT INTO MESSAGES(M_NO, FROM, MAIL, MESSAGE, DATE, STATUS) VALUES('','$fname','$email','$message','$thedate','New')");
mysql_close();
echo '<head><META http-equiv="refresh" content="0;URL=message.php?m=mail"></head>';
    ?>

the code is work but there is no data saved =(

here is the problem that i want to link this php code with my DB, that when i insert any data its automatically shown in the DB.

i will be happy if you can help me 🙂

johanafm

$result = mysql_query();
if (!$result) {
	echo mysql_errno() . ': ' . mysql_error();
}

Sweet

thanx ,,

and i solve it in my way, just like that : 🙂

<?php
include ("config.php");
$thedate=Date("y-m-d");
$sql="insert into messages(`from` , `mail` , `Message` , `date` , `status` )
  values ('$_GET[fname]', '$_GET[email]','$_GET[message]','$thedate','New')";
mysql_query($sql)or die("$sql");
echo '<head><META http-equiv="refresh" content="0;URL=message.php?m=mail"></head>';
    ?>

dagon

inserting unsanitised strings from a form in to the db is unwise, at the minimum use mysql_real_escape_string