why wont this work?

[Anon]

signup.html
<form method="POST" action="newuser.php">
<div align="left"><p><font face="BankGothic Md BT">Name</font>
<input type="text" name="name" size="14">
<br>
<p><font face="BankGothic Md BT">Email</font>
<input type="text" name="email" size="14">
<br>
<p><font face="BankGothic Md BT">Phone Number</font>
<input type="text" name="phonenum" size="14">
<br>
<input type="submit" value="Submit"></p>
</div></form>

newuser.php
<?
$db = mysql_connect("localhost", "root");
mysql_select_db("mydb",$db);
echo "Name: $POST['name'] Email: $POST['email'] Phonenumber: $POST['phonenum<BR>']";
mysql_query("INSERT INTO test VALUES ($POST['email'], $_POST['email'], 5554321, NULL);",$db);
echo "done";
?>

[bretticus]

INSERT INTO test VALUES ($POST['email'], $POST['email'], 5554321, NULL)

should be:

INSERT INTO test VALUES ('$POST['email']', '$POST['email']', 5554321, NULL)

I'm assuming email is some kind of text field and therefore needs single-quotes.

Cheers

[Anon]

🙁

Parse error: parse error, unexpected T_ENCAPSED_AND_WHITESPACE, expecting T_STRING or T_VARIABLE or T_NUM_STRING in /var/www/html/newuser.php on line 8

[bretticus]

Whoops, maybe those single quotes denoting POST array key are causing you grief. I've really never used the register_globals off option in PHP (not my decision).

try using concatenation in your string:

$query = "INSERT INTO test VALUES ('".$POST['email']."', '".$POST['email']."', 5554321, NULL)";

Good luck

[crimaniak]

echo "INSERT INTO test VALUES ($POST['email'], $POST['email'], 5554321, NULL);"; will help you. Don't try to use inside text constants anything more complex then "$var" or "$object->var".