管理面板：PHP表单没有'；不要将数据发送到MySQL

我有一个简单的代码添加横幅从管理面板的网站索引。但是添加功能不能正常工作这里是添加横幅的表单

                            <h2>Add Banner</h2>                            
<?php include ("../engine/config/config.php"); ?>
                                <form method="post" action="">
        Clicks
        <input type="text" name="click" value="0" style="width: 200px;" /> <div class="hr"></div>        
        Impressions
        <input type="text" name="imp" value="0" style="width: 200px;" /> <div class="hr"></div>                     
        LINK
        <input type="text" name="url" value="http://" style="width: 200px;" /> <div class="hr"></div>
        Size
      <select name="razmer">
<option value='468x60'>468x60</option>
<option value='88x31'>88x31</option>
</select>
<div class="hr"></div>
        Banner<br />
        <input type="text" name="picurl" value="http://" style="width: 200px;" /><div class="hr"></div>
        <input type="submit" name="submit" value="Submit"> <br  />
        </form>

<?
if($_POST['submit']) {
$click = $_POST['click'];
$imp = $_POST['imp'];
$url = $_POST['url'];
$razmer = $_POST['razmer'];
$picurl = $_POST['picurl'];
    $sql = "INSERT INTO `banneradd` (click, imp, url, razmer, picurl, username) VALUES ('$click', '$imp', '$url', '$razmer', '$picurl', '')";
    $result = mysql_query($sql);
    echo "<div class='hr'>The Banner has been added, please go back to the index: <a href='view_reklama.php'> Index </a></div>";
    }
    ?>

添加横幅
咔哒声
印象
链接
大小
468x60
88x31
横幅



好吧，你的代码有太多的错误，所以如果你从一个特定的网站或个人那里学习。。。找一个不同的来源

看在上帝的份上，不要用
打开PHP，清理你的变量！你能更具体一点吗，我是php初学者。。。谢谢：）检查
$result
，如果它包含
FALSE
有错误（你可以通过
mysql\u error（）
函数得到）。你应该阅读有关mysql注入的内容，
mysql\u query
从PHP5.5开始就不推荐使用，不应该再使用了。对不起，
怎么了。为什么不干脆
。。。？
<?php
error_reporting(E_ALL);
    // Turn on all error reporting. Honestly, do this every time you write a script,
    // or, better yet, change the PHP configuration.

$connection = mysqli_connect('host', 'username', 'password', 'database');
    // Somewhere in your config file, I assume you're calling mysql_connect.
    // This is a pretty similar syntax, although you won't need mysql_select_db.

if (isset($_POST['submit'])) {
    $click = mysqli_real_escape_string($connection, $_POST['click']);
        // This will escape the contents of $_POST['click'], e.g.
        // if the user inputted: Hello, 'world'! then this will produce:
        // Hello, \'world\'!
    $imp = mysqli_real_escape_string($connection, $_POST['imp']);
    $url = mysqli_real_escape_string($connection, $_POST['url']);
    $razmer = mysqli_real_escape_string($connection, $_POST['razmer']);
    $picurl = mysqli_real_escape_string($connection, $_POST['picurl']);

    $query = "
INSERT INTO `banneradd` (
    `click`,
    `imp`,
    `url`,
    `razmer`,
    `picurl`,
    `username`
)
VALUES
    (
        '$click',
        '$imp',
        '$url',
        '$razmer',
        '$picurl',
        ''
    );
";
    // Format your query nicely on multiple lines. MySQL will tell you what line
    // the error occurred on, but it's not helpful if everything's on the same line.
    $result = mysqli_query($connection, $query);
    $error = mysqli_error($connection);
    if ($error) {
        echo "A MySQL error occurred: $error<br>";
        echo "<pre>$query</pre>";
            // If an error occurred, print the error and the original query
            // so you can have a good look at it.
        die;
            // Stop executing the PHP.
    }

    echo '<div class="hr">The Banner has been added, please go back to the index: <a href="view_reklama.php"> Index </a></div>';
}
?>