[PHP] Teh Ultimate Question!

[Matt]

What is the meaning of life?

Kidding,

I have this code:

$insert = "INSERT INTO accounts (username, password, active) VALUES ('".$_POST['username']."', '".$_POST['pass']."', '1')";
$add_member = mysql_query($insert);

I have all my connections, selects, and if's and error's to tell me if it's wrong. But it's right it said. But the script doesnt insert, any reason?

 

[FragFrog]

On your servers php.ini (this is provided you work with Apache I think) set E_ERROR = ALL;, then restart your server and tell us what the error is you're getting.

Also, I removed your duplicate thread. Do not doublepost, next one will get you infracted.

Ow, and a last word: your code now will get your server hacked in about 3.4 seconds. NEVER use string concatanation.

 

[username1]

Ow, and a last word: your code now will get your server hacked in about 3.4 seconds. NEVER use string concatanation.

That was the first thing I noticed... at least strip all the quotes from the input before just stuffing it into a query.

 

[Bushido718]

well see why its not inserting ^^

$add_member = mysql_query($insert) or die(mysql_error());

 

[Javax]

omg filter/verify input please

 

[Matt]

Ah well, Ive made like 5+ releases of register scripts now, its working, and it's secured