database saving only password

Question

This is my first post here, I’ve been following the forum for a long time but I never wanted to interact, today this desire arose along with a little problem ...

I’m learning to html, css, php and etc... from tutorials, after numerous failures I end up achieving what I want. I have the habit of watching several tutorials about the same time and after watching all decide which to use, based on the divergence of information between them and my intuition. Until it works, but something always goes wrong and then I start looking for content to solve. One of the problems that haunts me is that I don’t know how to cite the mistake happened, like this one that’s happening now. So I think here would be the best option.

The problem: `

<?php </br>
session_start();</br>
$_SESSION['message']  = '';

$mysqli = new mysqli('localhost','root','','accounts'); </br>

if ($_SERVER['REQUEST_METHOD'] == 'POST') { <br>
    if ($_POST['password'] == $_POST['confirmpassword']){ <br>
        $username = $mysqli->real_escape_string($_POST['username']); <br>
        $email = $mysqli->real_escape_string($_POST['email']); <br>
        $password = md5($_POST['password']);

        $sql = "INSERT INTO users (username, email, password) "
        . "VALUES ('$username', '$email', '$password')";
        //if the query
        if ($mysqli->query($sql) === true) {
            $_SESSION['message'] = "deu certo";
            header("location: welcome.php");
        }

        else {
            $_SESSION['message'] = "Usuario nao pode ser add";
            }
        }
    }
?>

Hard to understand that code tag, my God.

This is the table I created: but when I go to check the db only has this:

This is my first question, if I did something wrong please tell me. Thank you!

Answer 1

Your problem is in the form that brings the data via POST.

You didn’t tag it name="username" in its input:

Current:

<input id="username" type="text" placeholder="Username" required autofocus>

Correct:

<input id="username" type="text" placeholder="Username" name="username" required autofocus>

<input id="email" type="email" placeholder="Valid Email" name="email" required autocomplete>

Moreover:

Your field password you’re only with 10 caracteres.

The guy md5 generates 32 caracteres.

Increase the field in your bank.

More about MD5: https://pt.wikipedia.org/wiki/MD5

Answer 2

Come on, first take these off <br/> from within PHP, if you want to use them put in a echo. To avoid problems with quotation marks etc on your SQL utilize {}:

$sql = "INSERT INTO users (username, email, password) VALUES ('{$username}', '{$email}', '{$password}')";

If you want to know if the data is really coming from a:

echo "<pre>";
print_r($_POST);
echo "</pre>";

So you will see the entire POST Array() so you can understand where the problem comes from, whether it is in the POST or not.