0

I'm a student and I was writing a signup script but I don't know why I'm getting this error, according to me every thing is fine and PHPStrom v2018.3.1 also not showing me any sign of error but when I submit the form I get this error.

Error:"Fatal error: Uncaught Error: Function name must be a string in D:\xampp\htdocs\electronic_store\signup.php:26 Stack trace: #0 {main} thrown in D:\xampp\htdocs\electronic_store\signup.php on line 26".

CODE:

if(isset($_REQUEST['btnRegister']))
{
    $id = rand(1111,9999);
    $name = $_POST('name');
    $email = $_POST('email');
    $password = md5($_POST('password'));
    $phone = $_POST('phone');

    if(mysqli_query($con,"insert into register values('$id','$name','$password','$email','$phone','employee')"))
    {
        echo "<script>alert('Register Successfully');</script>";
    }
    else
    {
        echo "<script>alert('Error');</script>";
    }

}

  • Your code is vulnerable to SQL Injection. Check out [How can I prevent SQL injection in PHP?](https://stackoverflow.com/questions/60174/how-can-i-prevent-sql-injection-in-php) – Emanuel Vintilă Dec 09 '18 at 09:01

1 Answers1

0

$_POST should be with square brackets not round brackets that's why it is returning errors.

$name = $_POST['name'];
$email = $_POST['email'];
$password = md5($_POST['password']);
$phone = $_POST['phone'];
Ayaz Ali Shah
  • 3,453
  • 9
  • 36
  • 68