Building a SQL string with PHP

[jokobe]

Well,
I tried to build a sql string with PHP.
When echoed it looks like that:
Insert into personal ( f_name, s_name, genus, kita_function, kita_group, start_date) values( '$f_name', '$s_name', '$genus', '$kita_function', '$kita_group', '$start_date')

In the fields like $f_name values are stored from a HTML form and they should be inserted into the table PERSONAL. Instead,
the value $f_name is inserted.
If I echo $f_name the proper value is shown in the browser.
Any helpful hint???

jokobe

 

[ericbrunson]

Paste the actual php line into here where you build the sql string. You're probably quoting wrong, or you may have "magic quotes" turned on, which is evil and can cause a lot of problems like this.

 

[caffrinho]

Personally, i would use the following:

$sql = "
INSERT INTO personal 
       (f_name, 
        s_name, 
        genus, 
        kita_function, 
        kita_group, 
        start_date) 
VALUES
     ( '".$f_name."', 
       '".$s_name."',
       '".$genus."', 
       '".$kita_function."',
       '".$kita_group."',
       '".$start_date."')
";

HTH

CAFF