'10', 'Icecap' => '15', 'Gromsblood' => '8', 'Black Lotus' => '20', 'Stonescale Eel' => '10', 'Mountain Silversage' => '5', 'Golden Sansam' => '6', 'Flask of the Titans' => '200', 'Flask of Supreme Power' => '200' ); $name = mysql_real_escape_string($_POST['name']); $item = mysql_real_escape_string($_POST['item']); $quantity = mysql_real_escape_string($_POST['quantity']); $total = $prices[$_POST['item']] * $_POST['quantity']; $sqlquery = "INSERT INTO tournament VALUES('$id','$name','$item','$quantity','$total')"; $results = mysql_query($sqlquery)or die(mysql_error()); mysql_close(); print "
You have just added this info:
";
print "Name : $name
";
print "Item: $item
";
print "Quantity: $quantity
";
print "Tickets = $total";
print "";
}
else {
?>