html - php register script not adding to mysql database

813

Just wondering what I'm doing wrong here guys. This is my register screen, I'm using an older version of php as im following a tutorial. The script so far detects missing fields and existing usernames, however when I try to register new user it doesnt add to the mysql database ?

<!DOCTYPE html>
<html lang="en">
<head>
    <title> Exercise 3</title>
    <meta charset="utf-8">
</head>
<body>
    <?php
        $name = “Frank”;
        $age = “28”;

        var_dump($name);
        echo "<br>";

        print_r($name);
        echo "<br>";

        var_dump($age);
        echo "<br>";
    ?>
</body>
</html>

114

Answer

Solution:

There are lot of things you need to change:

I am assuming that your connecting to your database twice i.econfig.php and by usingmysql_connect.
Your website is highly vulnerable to SQL injection. So usemysqli_real_escape_string or some other functions to prevent from such attacks.
In the below query:

Change this:

    $taken=("SELECT * FROM employee WHERE username ='{$myusername}'");

Remove those brackets like this:

    $taken="SELECT * FROM employee WHERE username ='{$myusername}'";

Start usingmysqli orPDO asmysql is being deprecated.

People are also looking for solutions to the problem: How to pass javascript variable to php inside javascript function

Source

Didn't find the answer?

Our community is visited by hundreds of web development professionals every day. Ask your question and get a quick answer for free.

Ask a Question