rendered paste body<?php include '../core/db.php'; $company_name = mysql_escape_string($_POST['company_name']); $contact_name = mysql_escape_string($_POST['contact_name']); $address = mysql_escape_string($_POST['address']); $city = mysql_escape_string($_POST['city']); $state = mysql_escape_string($_POST['state']); $zipcode = mysql_escape_string($_POST['zipcode']); $phone = mysql_escape_string($_POST['phone']); $email = mysql_escape_string($_POST['email']); $url = mysql_escape_string($_POST['url']); $add = $_POST['add']; if ( $company_name && $contact_name && $phone && $address && $email && $address && $city && $state && $zipcode && $url && $add ) { $connection = mysql_connect($hostname,$username,$password); mysql_select_db($databaseName, $connection); mysql_query("INSERT INTO company(company_name, contact_name, address, city, state, zipcode, phone, email, url ) VALUES('$company_name','$contact_name', '$address','$city','$state','$zipcode','$phone','$email','$url')", $connection); echo "Database Updated."; echo "<br />"; echo '<a href="../main.php" target="_parent">Return</a>'; echo '<hr />'; mysql_close($connection); }?><html><head></head><body><form method="post" action="<?=$_SERVER['PHP_SELF'];?>"><table cellpadding=1 cellspacing=1> <tr> <td>Company Name:</td> <td>Contact Name</td> </tr> <tr> <td><input type="text" name=company_name /></td> <td><input type="text" name=contact_name /></td> </tr> <tr> <td>Address:</td> <td>City:</td> <td>State:</td> <td>Zip Code:</td> </tr> <tr> <td><input type="text" name=address /></td> <td><input type="text" name=city /></td> <td><input type="text" name=state /></td> <td><input type="text" name=zipcode /></td> </tr> <tr> <td>Phone:</td> <td>E-Mail:</td> <td>URL:</td> </tr> <tr> <td><input type="text" name=phone /></td> <td><input type="text" name=email /></td> <td><input type="text" name=url /></td> </tr></table> <input type=submit name="add" value="Add" /></form> </body></html>