php eror

[xinjia]

---

<?php
include("connection.php"); // connect to database

mysql_query("INSERT INTO member (username, password, fname, lname,email)
VALUES ('$_POST[username]', '$_POST[password]', '$_POST[fname]','$_POST[email]' $_POST[lname])")
or die(mysql_error());

echo "New Contact Added";
?>

=============================================


this is registration form

<form action="adduser.php" method="post"></br>
UserName <input type="text" name="username"></br>
Password <input type="text" name="password"></br>
FirstName<input type="text" name="fname"></br>
LastName <input type="text" name="lname"></br>
email <input type="text" name="email"></br>


<input type="submit">


eror

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '2)' at line 2


unsay hinungdan ani nga eror?

[ChaosOrb]

<?php
include("connection.php"); // connect to database

mysql_query("INSERT INTO member (username, password, fname, lname,email) VALUES ('$_POST[username]', '$_POST[password]', '$_POST[fname]','$_POST[email]' $_POST[lname])")
or die(mysql_error());

echo "New Contact Added";
?>

nag.gamit ka ug single quote, inside double-quote... not sure. Para ma.isolate nmo ang error, segregate the query from the comman. Example:

//create the query in a string
$query = "INSERT INTO member(username, password, fname, lname, email) VALUES($_POST['username'], $_POST['password'], $_POST['fname'], $_POST['lname'], $_POST['email]"))

//execute the query
mysql_query($query); 

[papasilo]

VALUES ('$_POST[username]', '$_POST[password]', '$_POST[fname]','$_POST[email]' $_POST[lname]'

your error starts 2) kay imong $_POST[lname] wala man ni siya nimo g butangan og comma and single quote

it should be ,'$_POST[lname]')"). double check lng boss

[ChaosOrb]

VALUES ('$_POST[username]', '$_POST[password]', '$_POST[fname]','$_POST[email]' $_POST[lname]'

your error starts 2) kay imong $_POST[lname] wala man ni siya nimo g butangan og comma and single quote

it should be ,'$_POST[lname]')"). double check lng boss

sakto ni iya!

[salbahis]

<form action="adduser.php" method="post"></br>
UserName <input type="text" name="username" value=" -- 1=1"></br>
Password <input type="text" name="password"></br>
FirstName<input type="text" name="fname"></br>
LastName <input type="text" name="lname"></br>
email <input type="text" name="email"></br>


<input type="submit">