<?php$con = mysql_connect("host ","username","password");mysql_select_db("registration", $con);$id=$_POST['id'];$username=$_POST['username'];$password=$_POST['password'];$password=md5($pass); $confirm_password=$_POST['confirm_password'];$Fname =$_POST['fname'];$lname =$_POST['lname'];$email =$_POST['email'];$address =$_POST['address'];$city =$_POST['city'];$state =$_POST['state'];$zip =$_POST['zip'];$phone =$_POST['phone1'];$phone =$_POST['phone2'];$dob =$_POST['Birthday'];$sex =$_POST['sex'];$spouse =$_POST['spouse'];$sdob =$_POST['sBirthday'];$anniversary =$_POST['anniversary'];$facebook =$_POST['facebook'];$twitter =$_POST['twitter'];$google =$_POST['googleplus'];$linage =$_POST['linage'];$parents =$_POST['parents'];$grandparents =$_POST['grandparents'];$error1="'Error! The username you have chosen already exists!"; $result = mysql_query ("SELECT * FROM Registration WHERE username='$username'")); if($result == 1) { echo $error1; } else {mysql_query("INSERT INTO Registration ( username, password,fname,lname,email,address,city,state,zip,phone1,phone2,birthday,sex,spouse, sbirthday,anniversary,facebook,twitter,googleplus,linage,parents,grandparents)VALUES ('$username','$password','$firstname','$lastname','$email','$address','$city','$state','$zip','$phone', '$dob','$sex','$spous','$sdob,'$anniversary','$facebook','$twitter','$google','$linage','$parents', '$grandparents')");mysql_close($con);?>
$result = mysql_query ("SELECT * FROM Registration WHERE username='$username'"));//two closing brackets, remove one of them
$escaped_item = mysql_escape_string($POST["item"]);
$escaped_item = strip_tags($escaped_item);
