PHP/MySQL - INSERT question

programming
1

I’m trying to get this query to work.


$name = $_POST['name'];
$bads = array(".", "/", ",", "&", "-", "@", "#", "%", "*", "(", " ", ")");
$newname = str_replace($bads,"",$name);
$score = $_POST['score'];

$connect = mysql_connect("test", "test", "test");
mysql_select_db(test, $connect) or die(mysql_error());
$query = "INSERT INTO dynamic_scores (" . $newname . ") VALUES ('$score')";
mysql_query($query);

However, this query definitely won’t insert a row into the database. If I use a normal column name, instead of setting it to a variable, then it works…but I want to use the variable.

Any ideas?