MySQL Insert Query

[kelvin]

MySQL Insert Query

Code: [Select]

CREATE TABLE  `textbase` (
 `id` INT( 11 ) NOT NULL AUTO_INCREMENT ,
 `name` TEXT NOT NULL ,
 `date` DATE NOT NULL ,
PRIMARY KEY (  `id` )
);

config.php

Code: [Select]

<?php 
$dbhost = 'localhost';
$dbusername = 'root';
$dbpassword = 'mypassword';
$dbname = 'mydbname';
$conn=mysql_connect($dbhost, $dbusername, $dbpassword);
if(!$conn) :
   die('Could not connect: ' . mysql_error());
endif;
$db=mysql_select_db($dbname, $conn);
if(!$db) :
   die ('Can\'t connect to database : ' . mysql_error());
endif;
?>

insert.php

Code: [Select]

<?php
include('config.php');
$value2 = 'value two';
$value3 = 'now()';
mysql_query("INSERT INTO textbase (name, date) VALUES ('$value2','$value3')");
?>


[Gliktch]

What happened to value1? 

Umm and not to crap all over your work or anything, but any time you're accepting user input it should be treated like the plague - proper input sanitation (and in some cases validation) is essential to avoid being 0wned.

[kelvin]

Code: [Select]

$value1 = "auto_increment"