$editFormAction = $_SERVER['PHP_SELF']; if (isset($_SERVER['QUERY_STRING'])) { $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']); } if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "frmaddsite")) { $insertSQL = sprintf("INSERT INTO clientsite (siteid, sitedetails, staffid, clientid) VALUES (%s, %s, %s, %s)", GetSQLValueString($_POST['ClientSiteID'], "text"), GetSQLValueString($_POST['SiteDetails'], "text"), GetSQLValueString($_POST['StaffID'], "text"), GetSQLValueString($_POST['clientidx'], "text")); mysql_select_db($database_conn_gto, $conn_gto); $Result1 = mysql_query($insertSQL, $conn_gto) or die(mysql_error()); $insertGoTo = "clientsite.php"; if (isset($_SERVER['QUERY_STRING'])) { $insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?"; $insertGoTo .= $_SERVER['QUERY_STRING']; } header(sprintf("Location: %s", $insertGoTo)); } ?>