<?php
$host="localhost"; // Host name
$username="root"; // Mysql username
$password=""; // Mysql password
$db_name="ureviewdu"; // Database name
$tbl_name="Student"; // Table name
// Connect to server and select databse.
mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name")or die("cannot select DB");
/* Obliterate bad input */
$secUser = mysql_real_escape_string($_POST['reguser']);
$badpasses = $_POST['regpass'];
$salt = '~Z`!@#$%I^&*()_-+Q=}]{[\|"><';
$secPass = md5($badpasses.$salt);
$sql = "INSERT INTO Student (uname, pass, fname, lname, email, currGrade) VALUES('$secUser','$secPass','$_POST[regfirst]','$_POST[reglast]','$_POST[regemail]','$_POST[regclassrank]')";
$result = mysql_query($sql);
if ($result) {
echo "Thanks for signing up!";
} else {
echo "Failed.";
}
?>
HTML
<form action="inc/register/register.php" method="post" id="userRegistration">
<div class="cen"><h5>User Credentials</h5></div>
<div class="field required">
Username: <input type="text" name="reguser" tabindex="1" /><br />
</div>
<div class="field required">
Password: <input type="password" name="regpass" tabindex="2" /><br />
</div>
<div class="cen"><h5>User Details</h5></div>
<div class="field required">
First Name:<input type="text" name="regfirst" tabindex="3" /><br />
</div>
<div class="field required">
Last Name:<input type="text" name="reglast" tabindex="4" /><br />
</div>
<div class="field required">
Email:<input type="text" name="regemail" tabindex="5" /><br />
</div>
<div class="field required">
Current Class:<select name="regclassrank" tabindex="6">
<option disabled="disabled">Select Class</option>
<option value="1">Freshman</option>
<option value="2">Sophomore</option>
<option value="3">Pre-Junior</option>
<option value="4">Junior</option>
<option value="5">Senior</option>
<option></option>
</select>
</div>
<br />
<div class="cen"><input type="submit" name="submitUser" /></div>
</form>
Does anyone see anything wrong with this? It submits fine, but then nothing is INSERTED into the database….
You must execute the query with
mysql_query.