caint post to mysql database

I have a problem to post html form data via ‘.creation.php’ to mysql data… after submit it shows blank screen and nothing happens… form can be viewed on the link below

Link removed due to security issues.

my processing php code is as below

[php]<?php
include ‘conf/DBparametres.php’;
// Créer connection
$con= database_connect($db);
SESSION_START();
?>

<?php //Recuperation des valeurs du formulaire if(isset($_POST['submit'])){ // Fetching variables of the form which travels in URL $name=$_POST['name']; $sexe=$_POST['sexe']; $birthday=$_POST['birthday']; $country=$_POST['country']; $state=$_POST['state']; $zipcode=$_POST['zipcode']; $phone=$_POST['phone']; $adress=$_POST['adress']; $profession=$_POST['profession']; $maritalstatus=$_POST['maritalstatus']; $email=$_POST['email']; $password=$_POST['password']; $accountno=$_POST['accountno']; $bankcode=$_POST['bankcode']; $cashdesk=$_POST['cashdesk']; $swiftcode=$_POST['swiftcode']; $balance=$_POST['balance']; $currency=$_POST['currency']; $c1=$_POST['c1']; $c2=$_POST['c2']; $c3=$_POST['c3']; $c4=$_POST['c4']; $c5=$_POST['c5']; $active=$_POST['active']; if($name !=''||$email !=''){ //Insert Query of SQL $query = mysqli_query("insert into compte (name,sexe,birthday,country,state,zipcode,phone,adress,profession,maritalstatus,email,password,accountno,bankcode,cashdesk,swiftcode,balance,currency,c1,c2,c3,c4,c5,active) values ('$name','$sexe','$birthday','$country','$zipcode','$phone','$adress'$profession','$maritalstatus','$email','$password'$accountno','$bankcode','$cashdesk','$swiftcode'$balance','$currency','c1','c2'c3','c4','c5','active')"); echo "

Data Inserted successfully...!!"; } else{ echo "

Insertion Failed
Some Fields are Blank....!!

"; } } mysqli_close($connection); // Closing Connection with Server [/php] Please try the formular and tell me where am going wrong in my code

Use prepared statements. AND WHY THE HELL ARE YOU STORING BANK INFORMATION IN PLAIN TEXT IN A DATABASE!?!?!?!?

That page actually looks like some shady shit is going on

Yes… am only just testing something for the moment…so this not true version…so that why i just let it down as plain text

This was asked and answered on another forum. OP is also inserting user supplied data directly into the DB.

ok i would check it up

Sponsor our Newsletter | Privacy Policy | Terms of Service