How do I insert data into my mySql database using parameters in a URL?

Question

I am new to PHP and databases, here is my PHP code:

<?php 

$email = $_POST['Email'];
$tc = $_POST['TotalCash'];
$tr = $_POST['TotalReferalls'];

// Connects to your Database 
mysql_connect("205.178.146.92", "user", "pass") or die(mysql_error()); 
mysql_select_db("db") or die(mysql_error()); 
mysql_query("INSERT INTO UserInformation(Email, TotalCash, TotalReferalls) VALUES('$email', '$tc', '$tr')"); 
Print "Your table has been populated"; 
?>

and this works when I change $email and all of the variables to a set value, like $email = '[email protected]', $tc = 3, $tr = 4, but when I try to set it by calling a url (mysite.com/myphp.php?$email='[email protected]'&$tc=4&$tr=2) it does not work, please show a working way to set the parameters from the url.

Thanks in advance!

alex · Accepted Answer · 2011-06-15 02:28:59Z

1

If you want the parameters from the URL, switch $_POST to $_GET.

Also, you will need to use mysql_real_escape_string() with those outside strings, otherwise you have a SQL injection vulnerability.

Even better, because you are new to PHP and databases, learn it the best way from the start. Drop mysql_*() and use PDO.

answered Jun 15, 2011 at 2:28

alex

492k205 gold badges890 silver badges992 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

onepseudoxy · Accepted Answer · 2011-06-15 02:32:13Z

0

For URl, you have to change $_POST to $_GET.

answered Jun 15, 2011 at 2:32

onepseudoxy

5802 gold badges8 silver badges24 bronze badges

Collectives™ on Stack Overflow

How do I insert data into my mySql database using parameters in a URL?

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related