rendered paste body<?php
$err = '';
if($_POST['submit'] && checkdate($_POST['MONTH'],$_POST['DAY'],$_POST['YEAR']))
{
$ms = mysql_pconnect("localhost", "merter_calendar", "calendar");
if ( !$ms )
echo "Error connecting to database.\n";
mysql_select_db ("merter_calendar");
// mysql_real_escape_string() will escape characters that may cause your query to fail, such as single quotes.
$title = mysql_real_escape_string($_POST['title']);
$description = mysql_real_escape_string($_POST['description']);
$date = mysql_real_escape_string($_POST['YEAR'])."/".mysql_real_escape_string($_POST['MONTH'])."/".mysql_real_escape_string($_POST['DAY']);
$sql = mysql_query("INSERT INTO events (title, description, date, time) VALUES ('$title', '$description', '$date', '$time')");
$err = '<p class="bodytext"> Your event has been added to the calendar. </p>';
}
?>
<div id="contentleft">
<?php
if($err)
echo $err;
?>
<form action="" method="post">
<span class="bodytext">Title</span><br /><input type="text" maxlength="30" name="title" size="31" /><br /><br />
<span class="bodytext">Date</span><br />
<select NAME="DAY">
<? for($i=1;$i<32;$i++) {
echo "\t\t<option VALUE=\"".$i."\"".(($i==$_POST['DAY'])?' selected').">".$i."</option>\n";
} ?>
</select>
<select name="MONTH">
<option value="01">Jan</option>
<option value="02">Feb</option>
<option value="03">Mar</option>
<option value="04">Apr</option>
<option value="05">May</option>
<option value="06">Jun</option>
<option value="07">Jul</option>
<option value="08">Aug</option>
<option value="09">Sep</option>
<option value="10">Oct</option>
<option value="11">Nov</option>
<option value="12">Dec</option>
</select>
<select NAME="YEAR">
<option VALUE="2008">2008</option>
<option VALUE="2009">2009</option>
</select><br /><br />
<span class="bodytext">Time</span><br /><input type="text" maxlength="15" name="hours" size="2" /> : <input type="text" maxlength="15" name="minutes" size="2" /><br /><br />
<span class="bodytext">Event Description</span></span><br /><textarea name="description" rows="10" cols="70"> </textarea><br /><br />
<input type="submit" value="Send" name="submit" />
</form>
</div>