Connecting PHP source code and submit form to MySQL Database

Question

I'm trying to learn PHP and I'm trying to connect a MySQL database with my PHP code to make a submit form that lets me input data into the database. My problem is that the source code is connecting but the HTML isn't posting the variables to the PHP file. I could really use some help.

This is my HTML source code

<html>

<head>
<title>Form Input Data</title>
</head>

<body>

<table border="1">
  <tr>
    <td align="center">Form Input Employees Data</td>
  </tr>
  <tr>
  <td>
  <table>
    <form action="input.php" method="POST">
    <tr>
      <td>Name</td>
      <td><input type="text" name="name" size="20">
      </td>
    </tr>
    <tr>
      <td>Address</td>
      <td><input type="text" name="address" size="40">
      </td>
    </tr>
    <tr>
      <td></td>
      <td align="right"><input type="submit" 
      name="submit" value="Sent"></td>
    </tr>
    </table>
  </td>
</tr>
</table>

And this is my PHP source code

<?php

$user_name = "fees0_14446440";
$password = "********";
$database = "fees0_14446440_addressbook";
$server = "sql107.0fees.net";

mysql_connect("$server","$user_name","$password");

mysql_select_db("$database");


$order = "INSERT INTO Trial

        (name, address)

        VALUES

        ('$name',

        '$address')";


$result = mysql_query($order);

if($result){

    echo("<br>Input data is succeed");

} else{

    echo("<br>Input data is fail");

}
?>

This should be mandatory for any question with [php] and [mysql] tags: http://stackoverflow.com/questions/60174/how-can-i-prevent-sql-injection-in-php — vhu, Jun 16 '14 at 12:54
**warning** your code is vulnerable to sql injection attacks! — Daniel A. White, Jun 16 '14 at 12:54

score 3 · Accepted Answer · answered Jun 16 '14 at 12:56

3

You can find the POST data in PHP's $_POST variable. It should hold all the values that were passed via the POST method.

$name = $_POST["name"];

answered Jun 16 '14 at 12:56

aplewandowski

60
8

You are welcome. The SO question that vhu posted in a comment to your original question is definitely a good read as well. – aplewandowski Jun 16 '14 at 13:00
1

@user3717206 fyi you still need to sanitize your data! – Daniel A. White Jun 16 '14 at 13:24

score 2 · Answer 2 · answered Jun 16 '14 at 12:57

2

put POST values into variable

$name=$_POST['name'];
$address=$_POST['address'];

before sql query and write sql query as

$order = "INSERT INTO Trial

    (name, address)

    VALUES

    ('".$name."',

    '".$address."')";

answered Jun 16 '14 at 12:57

Bibek Jana

104
8

JustStarting · Answer 3 · 2014-06-16T15:04:12.033

Try the following:

<?php

$user_name = "fees0_14446440";
$password = "********";
$database = "fees0_14446440_addressbook";
$server = "sql107.0fees.net";

mysql_connect("$server","$user_name","$password");

mysql_select_db("$database");

if (isset($_POST['submit'])) {
$name = $_POST['name'];
$address = $_POST['address'];

$order = mysql_query("INSERT INTO Trial (name, address) VALUES ('$name', '$address')");

if ($order) {
    echo '<br>Input data is successful';
} else {
    echo '<br>Input data is not valid';
}
}
?>

score -1 · Answer 4 · answered Jun 16 '14 at 12:54

Try this

<html>

<head>
<title>Form Input Data</title>
</head>

<body>
<form action="input.php" method="POST">
<table border="1">
  <tr>
    <td align="center">Form Input Employees Data</td>
  </tr>
  <tr>
  <td>
  <table>

    <tr>
      <td>Name</td>
      <td><input type="text" name="name" size="20">
      </td>
    </tr>
    <tr>
      <td>Address</td>
      <td><input type="text" name="address" size="40">
      </td>
    </tr>
    <tr>
      <td></td>
      <td align="right"><input type="submit" 
      name="submit" value="Sent"></td>
    </tr>
    </table>
  </td>
</tr>
</table>
</form>

In PHP code

$order = "INSERT INTO Trial

        (name, address)

        VALUES

        ('$_POST["name"]',

        '$_POST["address"]')";

Connecting PHP source code and submit form to MySQL Database

4 Answers4

Linked