Generate query automatically from form

[phase]

hi,

i have been scouring the internet lately trying to look for an answer to my question, but im at a loss, i kno whteres a way of doing what i want, im just not sure how to go about it.

so here goes, i hope somebody out there can help...

my question is how do i go about making one fnction which inserts posted values into a database, im sick of writin gth esame code over and over and just chnaging the values of the form,

this is what i have atm...

PHP Code:

$sql = "INSERT INTO $table (first,second,company,home,mobile,fax,email,address,comments) VALUES ('$first', '$second', '$company', '$home', '$mobile', '$fax', '$email', '$address', '$comments')"; } $result = mysql_query($sql); echo "You have added that record! "; //end code 


as you can see the php is ok, bt to repeat this over and over is really getting on my nerves.

isnt the a way for example of doing it this way...

PHP Code:

$sql = "INSERT INTO $table ($names) VALUES ('$values')"; } $result = mysql_query($sql); echo "You have added / edited that record!"; 


then the sql command is generic and would work for all forms i create, how would i go about getting my form values and field names stored into arrays to do such a thing?

i have searched other forums, and i came across somethign tha tlooked ideal for me...http://forums.devnetwork.net/viewtopic.php?t=30683

i cannot get it to work at all tho, if ayone out there is capable of giving me a working example including form and where it goes to etc i would be extremely grateful

help would be really appreciated.

phase

[DJMaze]

now you mention i do use such function.
Here's my code

PHP Code:

function sql_insert($table, $fields)
    {
        if (is_array($fields) && !empty($fields)) {
            foreach ($fields AS $field => $value) {
                if (!is_int($field)) {
                    $qfields[] = $field;
                    $qvalues[] = "'".mysql_real_escape_string($value)."'";
                }
            }
            return mysql_query('INSERT INTO '.$table.' ('.implode(', ', $qfields).') VALUES ('.implode(', ', $qvalues).')');
        }
        return false;
    } 


$fields is of the form

PHP Code:

$fields['fieldname'] = 'value'; 


Be aware this code needs unslashed data and then adds proper slashing for mysql itself.
There are several reasons why i don't allow PHP auto-slashed values.
One of them is magic_quotes_sybase=On which makes addslashes() pretty useless.