# What wrong with this php script?

**URL:** <https://forum.kirupa.com/t/what-wrong-with-this-php-script/50774>\
**Category:** programming\
**Created:** [May 6, 2004, 9:07am UTC](https://forum.kirupa.com/t/what-wrong-with-this-php-script/50774 "2004-05-06T09:07:15Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![dreamer](https://avatars.discourse-cdn.com/v4/letter/d/6bbea6/32.png) [@dreamer](https://forum.kirupa.com/u/dreamer)\
**Post date:** [May 6, 2004, 9:07am UTC](https://forum.kirupa.com/t/what-wrong-with-this-php-script/50774/1 "2004-05-06T09:07:15Z")

</div>

Anyone?

```php

<? 
session_start(); 
header("Cache-control: private"); 

if((!$_SESSION['user_name'] === "") || (!$_SESSION['first_name'] === "") || (!$_SESSION['last_name'] === "")) { 
    echo "You must login to post! If you do not have an account you may register it for free!"; 
    include 'login.html'; 
    include 'signup.html'; 
    exit(); 
} 

else {
include 'db.php'; 
$title = $_POST['title']; 
$url = $_POST['url']; 
$message = $_POST['message']; 
$username = $_SESSION['user_name'];
$firstname = $_SESSION['first_name'];
$lastname = $_SESSION['last_name'];

$title = stripslashes($title); 
$url = stripslashes($url); 
$message = stripslashes($message); 

if ((!$title) || (!$url) || (!$message) || (!$username) || (!$firstname) || (!$lastname)) { 
    echo 'Please fill in all fields!'; 
}

$sql = mysql_query("INSERT INTO public (title, url, message, username, firstname, lastname, postdate) 
        VALUES('$title', '$url', '$message', '$username', '$firstname', '$lastname', 'now()')") 
}
?> 

```