Hp7wL9Zz

1CREATE TABLE IF NOT EXISTS `test` (
2  `firstname` varchar(100) NOT NULL,
3  `lastname` varchar(100) NOT NULL,
4  `nickname` varchar(100) NOT NULL
5)
6	
7<form action="" method="post">
8<input name="firstname" type="text" />
9<input name="lastname" type="text" />
10<input name="nickname" type="text" />
11<input type="submit" value="search" />
12</form>
13	
14firstname=$_REQUEST['firstname']
15	
16$firstname=mysql_real_escape_string(trim($_POST['firstname']));
17$lastname=mysql_real_escape_string(trim($_POST['lastname']));
18$nickname=mysql_real_escape_string(trim($_POST['nickname']));
19	
20$query="SELECT * FROM `test` WHERE 1";
21if ($firstname) $query .= " AND `firstname`='$firstname'";
22if ($lastname) $query .= " AND `lastname`='$lastname'";
23if ($nickname) $query .= " AND `nickname`='$nickname'";
24	
25$firstname=mysql_real_escape_string($_POST['firstname']);
26$lastname=mysql_real_escape_string($_POST['lastname']);
27$nickname=mysql_real_escape_string($_POST['nickname']);
28if($firstname!="" && $lastname!="" && $nickname!="")
29{
30     $query="SELECT * FROM `test` WHERE firstname='$firstname' and lastname='$lastname' and nickname='$nickname'";
31
32}
33	
34if(!empty($_REQUEST['firstname'])
35    $firstName = ' AND firstName = "'. mysql_real_escape_string($_REQUEST['firstname']).'"';
36else 
37    $firstName = '';
38
39if(!empty($_REQUEST['lastname'])
40    $lastName = ' AND lastName = "'. mysql_real_escape_string($_REQUEST['lastname']).'"';
41else 
42    $lastName = '';
43
44if(!empty($_REQUEST['nickName'])
45    $nickname = ' AND nickName = "'. mysql_real_escape_string($_REQUEST['nickName']).'"';
46else 
47    $nickname = '';
48
49
50$sql="SELECT * FROM `test` WHERE 1 $firstName $lastName $nickName";
51
52echo $sql."<br />";
53?>
54	
55$con=mysql_connect(DB_HOST,DB_USER,DB_PASSWORD) or die("Failed tO connect to MySQL: " . mysql_error());
56$db=mysql_select_db(DB_NAME) or die("Failed to connect to MySQL: " .       mysql_error());
57
58echo "Connected";
59
60if(isset($_POST['save'])!="")
61{
62echo $_POST['cname'];
63  $cname=mysql_real_escape_string($_POST['cname']);
64   $cid=mysql_real_escape_string($_POST['cid']);
65  $fname=mysql_real_escape_string($_POST['fname']);
66  $insert=mysql_query("INSERT INTO customertab(custName,custID,Fname)VALUES
67                                  ('$cname','$cid','$fname')",$con);
68
69     if($insert)
70   {
71    $msg="Successfully Inserted!!";
72  header('Location:Customer.html');
73   }
74   else
75  {
76 $errormsg="Something went wrong, Try again";
77  header('Location:Customer.html');
78  }
79}
80  ob_end_flush()
81
82
83
84  my textbox fields are filled.... but database will not take it...        help    me