Noch ein Beispiel aus deinem Code gegriffen (vllt. wird es dann deutlicher):
Code: Alles auswählen
$latein = $_POST['latein'];
Code: Alles auswählen
$latein = "'".mysql_real_escape_string($_POST['latein']) . "'";
Code: Alles auswählen
$latein = $_POST['latein'];
Code: Alles auswählen
$latein = "'".mysql_real_escape_string($_POST['latein']) . "'";
Code: Alles auswählen
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method=post>
Latein:<input type="text" name="latein" size="40" maxlength="80"><br>
Deutsch:<input type="text" name="deutsch" size="40" maxlength="80"><br>
Wortart:<input type="text" name="wortart" size="40" maxlength="80"><br>
Genitiv Sg.:<input type="text" name="genitiv" size="30" maxlength="80">
Genus:<input type="text" name="genus" size="5" maxlength="1"><br>
Nomintaiv m.:<input type="text" name="nominativ_m" size="30" maxlength="80">
Nomintaiv f.:<input type="text" name="nominativ_f" size="30" maxlength="80">
Nomintaiv n.:<input type="text" name="nominativ_n" size="30" maxlength="80"><br>
Präsens Aktiv:<input type="text" name="praesens_a" size="30" maxlength="80">
Perfekt Aktiv:<input type="text" name="perfekt_a" size="30" maxlength="80">
PVP:<input type="text" name="pvp" size="30" maxlength="80">
<input type="submit" value="Absenden">
</form>
<?php
include ("dbconnect.php");
$latein = "'".mysql_real_escape_string($_POST['latein']) . "'";
$deutsch = "'".mysql_real_escape_string($_POST['deutsch']) . "'";
$wortart = "'".mysql_real_escape_string($_POST['wortart']) . "'";
$genitiv = "'".mysql_real_escape_string($_POST['genitiv']) . "'";
$genus = "'".mysql_real_escape_string($_POST['genus']) . "'";
$nominativ_m = "'".mysql_real_escape_string($_POST['nominativ_m']) . "'";
$nominativ_f = "'".mysql_real_escape_string($_POST['nominativ_f']) . "'";
$nominativ_n = "'".mysql_real_escape_string($_POST['nominativ_n']) . "'";
$praesens_a = "'".mysql_real_escape_string($_POST['praesens_a']) . "'";
$perfekt_a = "'".mysql_real_escape_string($_POST['perfekt_a']) . "'";
$pvp = "'".mysql_real_escape_string($_POST['pvp']) . "'";
if ($latein == "" or $deutsch == "" or $wortart == "")
{
echo "Bitte fülle alle benötigten Felder aus";
}
else
{
if ($wortart == "nomen" || $wortart == "adjektiv" || $wortart == "pronomen" || $wortart == "verb" || $wortart == "adverb" || $wortart == "praeposition" || $wortart == "konjunktion" || $wortart == "zahlwort"){
$db_update = 'INSERT INTO `Vokabeln` (`latein`, `deutsch`, `wortart`, `genitiv`, `genus`, `nominativ_m`, `nominativ_f`, `nominativ_n`, `praesens_a`, `perfekt_a, pvp`)
VALUES ('. $latein .', '. $deutsch .', '. $wortart .', '. $genitiv .', '. $genus .', '. $nominativ_m .', '. $nominativ_f .', '. $nominativ_n .', '. $praesens_a .', '. $perfekt_a .', '. $pvp .')';
$db_update_now = mysql_query($db_update) OR die("SQL FEHLER:<br>" . mysql_error() . "<br><br>SQL Code:<br>" . $db_update);
}
else
{
echo "Bitte gib eine gültige Wortart an";
}
}
?>
Code: Alles auswählen
"INSERT INTO Vokabeln (latein, deutsch, wortart, genitiv, genus, nominativ_m, nominativ_f, nominativ_n, praesens_a, perfekt_a, pvp) VALUES ('$latein', '$deutsch', '$wortart', '$genitiv', '$genus', '$nominativ_m', '$nominativ_f', '$nominativ_n', '$praesens_a', '$perfekt_a', '$pvp')";
Code: Alles auswählen
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method=post>
Latein:<input type="text" name="latein" size="40" maxlength="80"><br>
Deutsch:<input type="text" name="deutsch" size="40" maxlength="80"><br>
Wortart:<input type="text" name="wortart" size="40" maxlength="80"><br>
Genitiv Sg.:<input type="text" name="genitiv" size="30" maxlength="80">
Genus:<input type="text" name="genus" size="5" maxlength="1"><br>
Nomintaiv m.:<input type="text" name="nominativ_m" size="30" maxlength="80">
Nomintaiv f.:<input type="text" name="nominativ_f" size="30" maxlength="80">
Nomintaiv n.:<input type="text" name="nominativ_n" size="30" maxlength="80"><br>
Präsens Aktiv:<input type="text" name="praesens_a" size="30" maxlength="80">
Perfekt Aktiv:<input type="text" name="perfekt_a" size="30" maxlength="80">
PVP:<input type="text" name="pvp" size="30" maxlength="80">
<input type="submit" value="Absenden">
</form>
<?php
include ("dbconnect.php");
$latein = "'".mysql_real_escape_string($_POST['latein']) . "'";
$deutsch = "'".mysql_real_escape_string($_POST['deutsch']) . "'";
$wortart = "'".mysql_real_escape_string($_POST['wortart']) . "'";
$genitiv = "'".mysql_real_escape_string($_POST['genitiv']) . "'";
$genus = "'".mysql_real_escape_string($_POST['genus']) . "'";
$nominativ_m = "'".mysql_real_escape_string($_POST['nominativ_m']) . "'";
$nominativ_f = "'".mysql_real_escape_string($_POST['nominativ_f']) . "'";
$nominativ_n = "'".mysql_real_escape_string($_POST['nominativ_n']) . "'";
$praesens_a = "'".mysql_real_escape_string($_POST['praesens_a']) . "'";
$perfekt_a = "'".mysql_real_escape_string($_POST['perfekt_a']) . "'";
$pvp = "'".mysql_real_escape_string($_POST['pvp']) . "'";
if ($latein == "" or $deutsch == "" or $wortart == "")
{
echo "Bitte fülle alle benötigten Felder aus";
}
else
{
if ($wortart == "nomen" || $wortart == "adjektiv" || $wortart == "pronomen" || $wortart == "verb" || $wortart == "adverb" || $wortart == "praeposition" || $wortart == "konjunktion" || $wortart == "zahlwort"){
$db_update = 'INSERT INTO `Vokabeln` (`latein`, `deutsch`, `wortart`, `genitiv`, `genus`, `nominativ_m`, `nominativ_f`, `nominativ_n`, `praesens_a`, `perfekt_a, pvp`)
VALUES ('. $latein .', '. $deutsch .', '. $wortart .', '. $genitiv .', '. $genus .', '. $nominativ_m .', '. $nominativ_f .', '. $nominativ_n .', '. $praesens_a .', '. $perfekt_a .', '. $pvp .')';
$db_update_now = mysql_query($db_update) OR die("SQL FEHLER:<br>" . mysql_error() . "<br><br>SQL Code:<br>" . $db_update);
echo $db_update;
}
else
{
echo "Bitte gib eine gültige Wortart an";
}
}
?>
Code: Alles auswählen
if ($wortart == "nomen" || $wortart == "adjektiv" || $wortart == "pronomen" || $wortart == "verb" || $wortart == "adverb" || $wortart == "praeposition" || $wortart == "konjunktion" || $wortart == "zahlwort"){
Code: Alles auswählen
if (in_array(str_replace("'",'',$wortart),array("nomen", "adjektiv", "pronomen", "verb", "adverb", "praeposition", "konjunktion", "zahlwort"))){
Code: Alles auswählen
`perfekt_a, pvp` ist nicht korrekt
stattdessen: perfekt_a, pvp