Why can I only add data in my database when I hash it to md5?

Asked Apr 06 '14 at 12:07

Active Apr 06 '14 at 12:07

Viewed 41 times

I have a function where I enter data from a html form in a database. When i try and submit the function it doesn't enter the value. But when I hash my variable to md5 it does enter the value to the database? Does anyone know why this might be?

Here is my function:

 function damage()
{
    require 'mysql.php';
    $today = date("Y-m-d");
    $cost = $_POST["cost"];
    $damage = $_POST["damage"];
    $query = "INSERT INTO schade VALUES (NULL, '$cost', '$damage', '$today')";
    mysql_query($query, $db) or die ("Vul alle velden in!"); 
    echo("Gelukt");
}
damage();

Thanks!

asked Apr 06 '14 at 12:07

thijs1095

Can you post the html code? – Sarim Javaid Khan Apr 06 '14 at 12:10
2

Your code is vulnerable to SQL injections. You should read on [how to prevent them in PHP](http://stackoverflow.com/q/60174/53114). This may also fix your problem. – Gumbo Apr 06 '14 at 12:10
1

Replace `die ("Vul alle velden in!")` with `die (mysql_error());` and you will know the reason behind your error. – Shankar Narayana Damodaran Apr 06 '14 at 12:15
Cost: What is the damage? – thijs1095 Apr 06 '14 at 12:19
1

Add this to the question, it's unreadable in the comment. – raina77ow Apr 06 '14 at 12:20
1

Explicitly state the columns that you're INSERTing INTO :: `INSERT INTO schade (foo1, foo2, foo3, foo4) VALUES (NULL, '$cost', '$damage', '$today') ` – AgRizzo Apr 06 '14 at 12:40

Why can I only add data in my database when I hash it to md5?

0 Answers0