diff --git a/post.php b/post.php index 9a262848..bc0131db 100644 --- a/post.php +++ b/post.php @@ -91,13 +91,13 @@ if(isset($_POST['edit_vendor'])){ if(isset($_POST['add_mileage'])){ - $date = strtotime($_POST['date']); + $date = strip_tags(mysqli_real_escape_string($mysqli,$_POST['date'])); $starting_location = strip_tags(mysqli_real_escape_string($mysqli,$_POST['starting_location'])); $destination = strip_tags(mysqli_real_escape_string($mysqli,$_POST['destination'])); $miles = intval($_POST['miles']); $purpose = strip_tags(mysqli_real_escape_string($mysqli,$_POST['purpose'])); - mysqli_query($mysqli,"INSERT INTO mileage SET mileage_date = $date, mileage_starting_location = '$starting_location', mileage_destination = '$destination', mileage_miles = $miles, mileage_purpose = '$purpose'"); + mysqli_query($mysqli,"INSERT INTO mileage SET mileage_date = '$date', mileage_starting_location = '$starting_location', mileage_destination = '$destination', mileage_miles = $miles, mileage_purpose = '$purpose'"); $_SESSION['alert_message'] = "Mileage added";