Well, I dont know, I am a beginner. I copied the script from a reference book "PHP & MYSQL for dummies". I have some background in programming, but not proficient. What exactly I can do?
Main Topics
Browse All TopicsHi! The insert query on line #39 has some problem, Please let me know how can I fix it. The error is "Can't execute insert query."
<?php
/* Program: Login.php
* Desc: Login program for the Members Only section of
* the pet store. It provides two options:
* (1) login using an existing Login Name and
* (2) enter a new login name. Login Names and
* passwords are stored in a MySQL database.
*/
session_start(); # 9
include("dogs.inc"); #10
switch (@$_POST['do']) #11
{
case "login": #13
$cxn = mysqli_connect($host,$user
or die ("Couldn't connect to server."); #15
$sql = "SELECT loginName FROM Member
WHERE loginName='$_POST[fusernam
$result = mysqli_query($cxn,$sql)
or die("Couldn't execute query."); #20
$num = mysqli_num_rows($result); #21
if ($num > 0) // login name was found #22
{
$sql = "SELECT loginName FROM Member
WHERE loginName='$_POST[fusernam
AND password=md5('$_POST[fpass
$result2 = mysqli_query($cxn,$sql)
or die("Couldn't execute query 2.");
$num2 = mysqli_num_rows($result2);
if ($num2 > 0) // password is correct #30
{
$_SESSION['auth']="yes"; #32
$logname=$_POST['fusername
$_SESSION['logname'] = $logname; #34
$today = date("Y-m-d h:i:s"); #35
$sql = "INSERT INTO Login (loginName,loginTime)
VALUES ('$logname','$today')";
$result = mysqli_query($cxn,$sql)
or die("Can't execute insert query.");
header("Location: Member_page.php"); #40
}
else // password is not correct #42
{
$message="The Login Name, '$_POST[fusername]'
exists, but you have not entered the
correct password! Please try again.<br>";
include("login_form.inc");
}
} #49
elseif ($num == 0) // login name not found #50
{
$message = "The Login Name you entered does not
exist! Please try again.<br>";
include("login_form.inc");
}
break; #56
case "new":
/* Check for blanks */ #59
foreach($_POST as $field => $value) #60
{
if ($field != "fax") #62
{
if ($value == "") #64
{
$blanks[] = $field;
}
}
}
if(isset($blanks)) #70
{
$message_new = "The following fields are blank.
Please enter the required information: ";
foreach($blanks as $value)
{
$message_new .= "$value, ";
}
extract($_POST);
include("login_form.inc");
exit();
}
/* Validate data */
foreach($_POST as $field => $value) #84
{
if(!empty($value)) #86
{
if(eregi("name",$field) and
!eregi("login",$field))
{
if (!ereg("^[A-Za-z' -]{1,50}$",$value))
{
$errors[]="$value is not a valid name.";
}
}
if(eregi("street",$field) or
eregi("addr",$field) or eregi("city",$field))
{
if(!ereg("^[A-Za-z0-9.,' -]{1,50}$",$value))
{
$errors[] = "$value is not a valid
address or city.";
}
}
if(eregi("state",$field))
{
if(!ereg("[A-Za-z]{2}",$va
{
$errors[]="$value is not a valid state.";
}
}
if(eregi("email",$field))
{
if(!ereg("^.+@.+\\..+$",$v
{
$errors[] = "$value is not a valid
email address.";
}
}
if(eregi("zip",$field))
{
if(!ereg("^[0-9]{5,5}(\-[0
$value))
{
$errors[]="$value is not a valid
zipcode.";
}
}
if(eregi("phone",$field)
or eregi("fax",$field))
{
if(!ereg("^[0-9)(xX -]{7,20}$",$value))
{
$errors[] = "$value is not a valid
phone number. ";
}
}
} // end if empty #138
} // end foreach
if(@is_array($errors)) #140
{
$message_new = "";
foreach($errors as $value)
{
$message_new .= $value." Please try
again<br />";
}
extract($_POST);
include("login_form.inc");
exit();
}
/* clean data */
$cxn = mysqli_connect($host,$user
foreach($_POST as $field => $value) #156
{
if($field != "Button" and $field != "do")
{
if($field == "password")
{
$password = strip_tags(trim($value));
}
else
{
$fields[]=$field;
$value = strip_tags(trim($value));
$values[] =
mysqli_real_escape_string(
$$field = $value;
}
}
}
/* check whether user name already exists */
$sql = "SELECT loginName FROM Member
WHERE loginName = '$loginName'"; #177
$result = mysqli_query($cxn,$sql)
or die("Couldn't execute select query.");
$num = mysqli_num_rows($result); #180
if ($num > 0) #181
{
$message_new = "$loginName already used.
Select another User Name.";
include("login_form.inc");
exit();
}
/* Add new member to database */
else #190
{
$today = date("Y-m-d");
$fields_str = implode(",",$fields);
$values_str = implode('","',$values);
$fields_str .=",createDate";
$values_str .='"'.",".'"'.$today;
$fields_str .=",password";
$values_str .= '"'.","."md5"."('".$passwo
$sql = "INSERT INTO Member ";
$sql .= "(".$fields_str.")";
$sql .= " VALUES ";
$sql .= "(".'"'.$values_str.")";
$result = mysqli_query($cxn,$sql)
or die("Couldn't execute insert query.");
$_SESSION['auth']="yes"; #205
$_SESSION['logname'] = $loginName; #206
/* send email to new member */ #208
$emess = "A new Member Account has been setup. ";
$emess.= "Your new Member ID and password are: ";
$emess.= "\n\n\t$loginName\n\t$pass
$emess.="We appreciate your interest in Pet";
$emess.= " Store at PetStore.com. \n\n";
$emess.= "If you have any questions or problems,";
$emess.= " email webmaster@petstore.com";
$ehead="From: member-desk@petstore.com\r
$subj = "Your new Member Account from Pet Store";
$mailsnd=mail("$email","$s
header("Location: New_member.php"); #219
}
break; #221
default: #223
include("login_form.inc");
}
?>
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Business Accounts
Answer for Membership
by: RQuadlingPosted on 2008-03-13 at 18:54:34ID: 21122485
Can you echo the SQL statement before you execute it?