数据未插入数据库且没有错误

Question

I have a problem...

Im trying to take data inserted into my html5 form and insert it into a database. Now i have the form made along with a script that should be working; instead there is no data being inserted into the database and there is no error showing. Please help.

form.php

<form name="loginForm" method="post" action="process.php">
<input id="username" type="text" placeholder="Username" name="username">
<input id="password" type="password" placeholder="Password" name="password">
<input type="submit" id="Login" class="form-control" value="Log In">
</form>

process.php

<?
$username=$_POST['username'];
$password=$_POST['password'];
mysql_connect("localhost", "root", "toor") or die(mysql_error());
mysql_select_db("formd") or die(mysql_error());  mysql_query("INSERT INTO `data` VALUES ('$username', '$password')");
Print "Your information has been successfully added to the database.";
?>

Now i know this isnt a secure way to store passwords or usernames but this isnt for any website really i just wanna know how to take information from my form and store it into a database.

Answer 1

You've added minimal error handling to all mysql functions call but the one involved in the actual query....

The script is also prone to sql injections.

The mysql_* extension is mared as deprecated, better pick another mysql extension.

<?php
$mysql = mysql_connect("localhost", "root", "toor")
  or die(mysql_error());
mysql_select_db("formd", $mysql)
  or die(mysql_error($mysql)); 

$username=mysql_real_escape_string($_POST['username'], $mysql);
$password=mysql_real_escape_string($_POST['password'], $mysql);

mysql_query("INSERT INTO `data` VALUES ('$username', '$password')", $mysql)
  or die(mysql_error($mysql));
echo "Your information has been successfully added to the database.";

using or die(mysql_error()) can lead to Information Leakage issues