Passing a variable from html to mysql with php

Question

I'm trying to put info I get from a form in html into a mysql database by way of php and do it all on the same page. My code so far is thus

<?php
    require('conn.php');
    if( isset($_POST['send'])){
    $Product_Name = htmlspecialchars($_POST["product_name"]);
    $Stock = htmlspecialchars($_POST["stock"]);
    $Price = htmlspecialchars($_POST["price"]);

    $insert = "INSERT INTO product (Product_Name, Stock, Price) VALUES ('$Product_Name','$Stock','$Price')";
    if (mysqli_query($conn,$insert)){
            echo "Values inserted!\n";
    }
    else {
            echo "Error inserting values: " . mysqli_error($conn);
    }
    }
    mysqli_close($conn);

?>

<html>
<body>
<form action="insert.php" method="post">

<table border="1">

<tr>
    <td>Product Name</td>
    <td align="center"><input type="text" name="product_name" size= "30" /></td>
</tr>

<tr>
    <td>In Stock</td>
    <td align="center"><input type="text" name ="stock" size="30"/></td>
</tr>

<tr>
    <td>Price</td>
    <td align="center"><input type="text" name="price" size="30"/></td>
</tr>

<tr>
    <td>Submit</td>
    <td align="center"><input type="submit" value="send"></td>
<tr>

However when I try and load the page its just comes up blank. It used to at least show the form before I added in the php code but I can't pin down what I broke. What do I need to change so that this puts the users data into the database?

Edit: changed code based upon Jeffry's catches

You might be interested in how to prevent SQL injection in PHP — brzuchal
– brzuchal, Commented May 3, 2018 at 4:02

Sandeep · Accepted Answer · 2018-05-03 04:00:08Z

1

You're missing the name attribute in your submit button declaration.

update

<input type="submit" value="send">

to

<input type="submit" name = "send" value="send">

answered May 3, 2018 at 4:00

Sandeep

1452 silver badges7 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Jeffry Evan · Accepted Answer · 2018-05-03 03:38:53Z

1

just quick check, you miss the closing ) in

$Product_Name = htmlspecialchars($_POST["product_name"];

i also think you need a dot to append the string

$insert = "INSERT INTO product (Product_Name, Stock, Price) VALUES ("$Product_Name","$Stock","$Price")";

and if your product name is a varchar, you might need to quote it

answered May 3, 2018 at 3:38

Jeffry Evan

3271 silver badge7 bronze badges

2 Comments

masral Over a year ago

Well, your advice got the page to load so thank you for that but its not putting it into the database.

Jeffry Evan Over a year ago

have you check the query (to see if its append the string and the quote on varchar)? try to echo the $insert to see if you get it right

Collectives™ on Stack Overflow

Passing a variable from html to mysql with php

2 Answers 2

Comments

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related