rendered paste body<?php$err = '';if($_POST['submit'] && checkdate($_POST['MONTH'],$_POST['DAY'],$_POST['YEAR'])){ $ms = mysql_pconnect("localhost", "merter_calendar", "calendar"); if ( !$ms ) echo "Error connecting to database.\n"; mysql_select_db ("merter_calendar"); // mysql_real_escape_string() will escape characters that may cause your query to fail, such as single quotes. $title = mysql_real_escape_string($_POST['title']); $description = mysql_real_escape_string($_POST['description']); $date = mysql_real_escape_string($_POST['YEAR'])."/".mysql_real_escape_string($_POST['MONTH'])."/".mysql_real_escape_string($_POST['DAY']); $sql = mysql_query("INSERT INTO events (title, description, date, time) VALUES ('$title', '$description', '$date', '$time')"); $err = '<p class="bodytext"> Your event has been added to the calendar. </p>';}?><div id="contentleft"><?phpif($err) echo $err;?><form action="" method="post"><span class="bodytext">Title</span><br /><input type="text" maxlength="30" name="title" size="31" /><br /><br /><span class="bodytext">Date</span><br /><select NAME="DAY"> <? for($i=1;$i<32;$i++) { echo "\t\t<option VALUE=\"".$i."\"".(($i==$_POST['DAY'])?' selected').">".$i."</option>\n"; } ?></select><select name="MONTH"> <option value="01">Jan</option> <option value="02">Feb</option> <option value="03">Mar</option> <option value="04">Apr</option> <option value="05">May</option> <option value="06">Jun</option> <option value="07">Jul</option> <option value="08">Aug</option> <option value="09">Sep</option> <option value="10">Oct</option> <option value="11">Nov</option> <option value="12">Dec</option> </select><select NAME="YEAR"> <option VALUE="2008">2008</option> <option VALUE="2009">2009</option></select><br /><br /><span class="bodytext">Time</span><br /><input type="text" maxlength="15" name="hours" size="2" /> : <input type="text" maxlength="15" name="minutes" size="2" /><br /><br /><span class="bodytext">Event Description</span></span><br /><textarea name="description" rows="10" cols="70"> </textarea><br /><br /><input type="submit" value="Send" name="submit" /></form></div>