I have a script that when the user request for verification code, it will generate the verification code, store the verification code in the database and send the code to the user.

However, the code is not stored in the database. Can anybody check my script?

My script is :

<?php
$title = "Process Request";
include ("header_footer_function.php");

header_start();

// Connect to database to store verification code
mysql_connect("localhost", "root", "admin") or die(mysql_error());
mysql_select_db("project_db") or die(mysql_error());


// Function to generate random alphabets and numbers
function generate_str ($length) {
$characters = array('a','b','c','d','e','f','g','h','i','j','k', 'l','m','n','o','p','q','r','s','t','u','v','w','x ','y','z','0','1','2','3','4','5','6','7','8','9') ;
$random_str = "";
for ($i = 0; $i < $length; $i++) {
srand((double)microtime()*1000000);
$random_chr = round(rand(0, count($characters)-1));
$random_str .= $characters[$random_chr];
}
return ($random_str);
}

$code = generate_str(12);

// Store code in database
mysql_query("INSERT INTO code (code_string) VALUES ('$code')");

// Send e-mail
$subject = "Verification Code Request";
$email = $_POST['email'] ;
$name = $_POST['name'];
$company = $_POST['company'];
$message = "Name: $name\r\n"."Company: $company\r\n"."Verification Code: $code\r\n";
$headers = "From: xxxxx@xxx.com.my";

ini_set("SMTP","mail.xxx.com.my");
$sent = mail($email, $subject, $message, $headers) ;
if($sent)
{print "Please check your e-mail for verification code"; }
else
{print "We encountered an error sending your mail"; }

footer();
?>

please check your db table field name is correct or you may discard the field name in the insert query by using this code

mysql_query("INSERT INTO code VALUES ('$code')");

__________________
Ipoh Chai | Free Blog Directory | Free PHP Game script

Plz check if your value for $code fix into the column code_string.

For tracing/debugging purpose, you may try to create a "testing" script just to test that particular lines of codes, i.e. executing the query.
- Validate the SQL query syntax, the table name, field name and field length against the input length etc.
- Or even, display out the SQL query and plug the query into the SQL front-end tool or the SQL console to manually execute the statement to ensure it is correct.

Suggest you can wrap up the lines that execute the SQL query as a method, in line with the concept of DAL (Data Access Layer) instead of scattering the SQL queries everywhere in different scripts, so that when it can be called in the testing script and then later reused in the development or production script.