<?PHP
$user="";
$host="";
$password="";
$database="";
$connection = mysql_connect ($host, $user, $password)
or die ("Kon geen verbinding maken");
$db = mysql_select_db($database, $connection)
or die ("Kon database niet selecteren");
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
$values = array ();
foreach($_POST as $key => $value) {
$values[$key] = mysql_real_escape_string ($value);
if (!empty ($values['nummer']) && !empty ($values['prijs'])) {
// ik ga er van uit dat prijs GEEN string is, dus geen enkele quotes
$sql = "
INSERT INTO nummer
SET
nummer = '" . $values['nummer'] . "',
prijs = " . $values['nummer'];
if (!mysql_query ($sql)) {
trigger_error (mysql_error ());
}
}
}
}
?>