Problem when saving record in database with PHP7

Question

Problem when saving record in database with PHP7

Navigation

#1 by (3 votes)
#2 by (0 votes)

1

I am using PHP 7 to enter records in a database. It says "full subscription" but I check my database and I do not have any data saved. Where this error? And how can I solve it?

This is my registry.php file

<?php
$db_host="localhost";
$db_user="root";
$db_password="123456";
$db_name="Inscripcion";
$db_table_name="Nuevo";
$db_connection = mysqli_connect($db_host, $db_user, $db_password, $db_name);

if (!$db_connection) {
    die('No se ha podido conectar a la base de datos');
}
$subs_name = utf8_decode($_POST['nombre']);
$subs_last = utf8_decode($_POST['apellido']);
$subs_email = utf8_decode($_POST['email']);

$resultado = mysqli_query($db_connection, "SELECT * FROM Nuevo");

if (mysqli_num_rows($resultado)>0)
{

header('Location: Fail.html');

} else {

    $insert_value = "INSERT INTO Nuevo (Nombre, Apellido, email) values ('$_POSTname[nombre]','$_POST[apellido]','$_POST[email]')";

$retry_value = mysqli_query($db_connection, $insert_value);

if (!$retry_value) {
   //die('Error: '.mysqli_error());
}

header('Location: success.html');

}

mysqli_close($db_connection);


?>

And this is my index.html

<!doctype html>
<html>
<head>
<meta charset="utf-8">
<title>Formulario de Registro SCIII</title>
<link href="estilos.css" rel="stylesheet" type="text/css">
</head>

<body>



<div class="group">
  <form action="registro.php" method="POST" action="registro.php">
  <h2><em>Formulario de Registro</em></h2>


      <label for="nombre">Nombre <span><em>(requerido)</em></span></label>
      <input type="text" id="nombre" name="nombre" class="form-input" required/>   

      <label for="apellido">Apellido <span><em>(requerido)</em></span></label>
      <input type="text" id="apellido" name="apellido" class="form-input" required/>           

      <label for="email">Email <span><em>(requerido)</em></span></label>
      <input type="email" id="email" name="email" class="form-input" />

     <center> <input class="form-btn" name="submit" type="submit" value="Suscribirse" /></center>
  </form>
</div>
</body>
</html>

mysql php

asked by manuel dacambra 22.07.2016 в 22:19

source

2 answers

How to convert string or javascript string to object json? [duplicate] Distinct query with INNER JOIN in SQL SERVER?

score 3 · Answer 1

You have an error in insert that will make it fail:

INSERT INTO Nuevo (Nombre, Apellido, email) values ('$_POSTname[nombre]','$_POST[apellido]','$_POST[email]')

If you notice it puts $_POSTname[nombre] and that is incorrect, it should be $_POST[nombre] .

INSERT INTO Nuevo (Nombre, Apellido, email) values ('$_POST[nombre]','$_POST[apellido]','$_POST[email]')

Apart from that, your code may suffer SQL injection attacks , you should use prepared statements instead of SQL dynamic.

score 0 · Answer 2

I recommend you declare a variable to save the name and other data, so you can apply some kind of filter and use the isset function to not try to enter empty variables

$v_nombre =isset( $_POST['nombre'])?strip_tags($_POST['nombre']):'no-ingresa';

for example, and then make the query with the variable

$insert_value = "INSERT INTO Nuevo (Nombre, Apellido, email) values ('$v_nombre','$v_apellido','$v_email')";