query("INSERT INTO `".$config->database['prefix']."books` (`title`, `author`, `description`) VALUES ('".mysql_real_escape_string(stripslashes($_POST['title']))."', '".mysql_real_escape_string(stripslashes($_POST['author']))."', '".mysql_real_escape_string(stripslashes($_POST['data']))."')"); $db->log($_SESSION['tt-admin-username'], 'Created New Book: '.$_POST['title']." (".mysql_insert_id($link).")"); ?>