Insert Into mysql using php

Question

I am working with php and mysql for the first time. The goal is to have a table that store email addresses to form a mailing list for a newsletter. my table Emails has 2 columns ID (INT auto increment) and email (varchar, 255)

I can connect to the database but I cannot write to it. I think my problem is in the syntax of my INSERT INTO statement. I have seen many examples and they seem to use different syntax specifically around the values. form code:

    <form method="post" action="email.php" class="form-container">
    <div class="form-title"><h2>Sign up for my newsletter!</h2></div>
    <div class="form-title">Email Address</div>
    <input class="form-field" required="required" placeholder="[email protected]" type="text" name="newEmail" /><br />
    <div class="submit-container">
    <input class="submit-button" type="submit" value="Submit" /></div>
  </form>

php code:

    <?php
    $dbHost = "localhost";
    $dbUser = "input";
    $dbPass = "input";
    $dbName = "MailingList";


$conn= mysqli_connect ($dbHost, $dbUser, $dbPass, $dbName);

if(mysqli_connect_errno()) {
die("FAIL:". mysqli_connect_error() . "(" . mysqli_connect_errno() . ")");
}

$addEmail = "mysqli_real_escape_string($_POST['newEmail'])";

$query ="INSERT INTO Emails (email) VALUES ('$addEmail')"

mysqli_close($conn)
?>

Given the answers below, you're also missing a closing semi-colon $query ="INSERT INTO Emails (email) VALUES ('$addEmail')" you can use two of those answers to piece everything together. — Funk Forty Niner
– Funk Forty Niner, Commented Feb 18, 2014 at 18:20

Krish R · Accepted Answer · 2014-02-18 18:20:51Z

2

You have missed to add the $conn i.e database link to the mysqli_real_escape_string and also, you have wrapped the mysqli_real_escape_string() inside the ", so it consider as string. So remove the " and use it. Try this,

$addEmail = mysqli_real_escape_string($conn,$_POST['newEmail']);
                                 ......^
$query ="INSERT INTO Emails (email) VALUES ('$addEmail')";

instead of

$addEmail = "mysqli_real_escape_string($_POST['newEmail'])";

edited Feb 18, 2014 at 18:20

answered Feb 18, 2014 at 18:15

Krish R

22.7k7 gold badges54 silver badges60 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Funk Forty Niner Over a year ago

You're welcome Krish. I deleted my comment after noticing it.

kero · Accepted Answer · 2014-02-18 18:23:56Z

1

You need to execute the query, not just write it.

$query ="INSERT INTO Emails (email) VALUES ('$addEmail')";
mysqli_query($conn, $query);

If you use a prepared statement, you can save yourself the trouble of escaping:

$stmt = mysqli_prepare($conn, "INSERT INTO Emails (email) VALUES (?)");
mysqli_stmt_bind_param($stmt, "s", $_POST['newEmail']);
mysqli_stmt_execute($stmt);

If you want non-procedural style (aka oop), this would look like the following

$stmt = $conn->prepare("INSERT INTO Emails (email) VALUES (?)");
$stmt->bind_param("s", $_POST['newEmail']);
$stmt->execute();

edited Feb 18, 2014 at 18:23

answered Feb 18, 2014 at 18:17

kero

10.7k5 gold badges44 silver badges52 bronze badges

3 Comments

D4RKCIDE Over a year ago

I edited my code and now it is creating records, but still is not actually writing the email to the record. Any idea why?

kero Over a year ago

So you have empty rows? As I said, you need to execute the query - then be sure to check for errors as well.

D4RKCIDE Over a year ago

just to be clear in php this line is how you execute the query correct? mysqli_query($conn, $query); i will have to work on this more later, but thank you for your answer.

John Conde · Accepted Answer · 2014-02-18 18:16:05Z

1

Get rid of the quotes around your escape function. This turns it into a string instead of actually escaping the value:

$addEmail = mysqli_real_escape_string($conn,$_POST['newEmail']);

answered Feb 18, 2014 at 18:16

community wiki

John Conde

1 Comment

Funk Forty Niner Over a year ago

$addEmail = mysqli_real_escape_string($conn,$_POST['newEmail']); ;-) since it's mysqli_*

Community · Accepted Answer · 2023-11-17 19:53:52Z

1

$addEmail = mysqli_real_escape_string($conn,$_POST['newEmail']);

https://www.php.net/mysqli_real_escape_string

string mysqli_real_escape_string ( mysqli $link , string $escapestr )

edited Nov 17, 2023 at 19:53

CommunityBot

11 silver badge

answered Feb 18, 2014 at 18:16

Abhik Chakraborty

44.9k6 gold badges56 silver badges63 bronze badges

Collectives™ on Stack Overflow

Insert Into mysql using php

4 Answers 4

1 Comment

3 Comments

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

1 Comment

3 Comments

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related