<%@ page language="java" import="java.sql.*, java.net.*" %> In-A-Box-Software <% String pageAction = request.getParameter("action"); if (pageAction==null) { pageAction="showform"; } String includePage = "technical_support_form.jsp"; if (pageAction.equals("support")) { includePage = "technical_support_thankyou.jsp"; Class.forName("org.gjt.mm.mysql.Driver").newInstance(); Connection connection = DriverManager.getConnection( "jdbc:mysql://localhost/inaboxso_inaboxsoftware?user=inaboxso_dba&password=venus"); String querystr = "INSERT INTO `inaboxso_contactinfo` ( `contact_type` , `contact_email` , `concerning` , `text_content` , `date_posted`, `mark_read` ) "+ "VALUES ('technical_support', '"+ URLEncoder.encode(request.getParameter("email"))+"', '"+ URLEncoder.encode(request.getParameter("concerning"))+"', '"+ URLEncoder.encode(request.getParameter("question"))+"', NOW( ), 0 );"; PreparedStatement query = connection.prepareStatement(querystr); query.execute(); } %>