Stumped @ MySql insert query

From: Date: Fri, 13 Jun 2003 18:15:42 +0000
Subject: Stumped @ MySql insert query
Groups: php.general 
Request: Send a blank email to php-general+get-151394@lists.php.net to get a copy of this message
Hello everyone,
     I am trying to execute a simple query using $_POST variables, so that variable poisoning is not possible. note: I have register_globals ON on my site. I am getting the error shown below . Please advise ... as I can't seem to figure out why !
<? // connect to the BD/Table etc // Formulate the query
    $sql1 = "INSERT INTO contacts
	        VALUES (
$_POST['company'], $_POST['pri_name'], $_POST['sec_name'], $_POST['assistant_1'], $_POST['assistant_2'], $_POST['pri_practice'], $_POST['sec_practice'], $_POST['sic'], $_POST['date_established'], $_POST['size'], $_POST['phone_1'], $_POST['phone_2'], $_POST['phone_3'], $_POST['email_1'], $_POST['email_2'], $_POST['email_3'], $_POST['url'], $_POST['city'], $_POST['msa'], $_POST['status'], $_POST['timezone'], $_POST['first_contact'], $_POST['next_contact'], $_POST['last_contact'], $_POST['notes'], $_POST['email_history'], $_POST['battery_started'], $_POST['details'],
                               TIMESTAMP();
$_POST['source']
	            )";
    $result1 = mysql_query($sql1)
        or die ( 'Database Error has occured.');
$num_results = mysql_num_rows($result1); echo $num_results." rows added !!"; ?> Parse error: parse error, expecting T_STRING' or T_VARIABLE' or `T_NUM_STRING' in /home/ABCD/CRM/add.php Thanks in advance. Pushpinder

« previous php.general (#151394) next »