Update Query

Hey,

I'm trying to get a form field to update records in a table, and here's where I'm at:

(Note this code is condensed to only provide what's needed for this post, to make it clearer!)

I am trying to update the table DIRECTORY_LISTING.

The FORM:
<form method="post" action="?">
<input type="hidden" name="submitProfile" value="1">
<input type="text" name="company">
</form>


Then that's submitted and we have this:
if (@$_POST['submitProfile']) {
$currentDate = date("Y-m-d H:i:s", getAdjustedLocalTime()); # format: YYYY-MM-DD HH:MM:SS (24hour format)
$updateQuery = "UPDATE `{$GLOBALS['TABLE_PREFIX']}directory_listing` SET
company = '".mysql_real_escape_string( $_POST['company'] )."',
updatedDate = '".mysql_real_escape_string( $currentDate )."',
updatedByUserNum = '" .mysql_real_escape_string($currentloggednum). "'
WHERE num = '" .mysql_real_escape_string($currentprofilenum). "'";
mysql_query($updateQuery) or die("MySQL Error Updating User:<br/>\n". htmlspecialchars(mysql_error()) . "\n");

NOTE, the variables in there are defined as:

$currentloggednum -- num of account record - to record the USER who updated the record

$currentprofilenum are defined - num of record in directory_listing to ensure the correct record is updated.


Now, when I submit the form to update the record, it is almost working..!

The LAST UPDATED (updateDate) correctly updates - i.e. i submit the form, and then I look in the database, and the LAST UPDATE time has been updated.

However, the COMPANY field doesn't update. Whatever entry I put in the field, it doesn't update the database record.

Which is why I'm confused - the function is obviously working ok as it's updating the udpated date.

I can only think it's something wrong with this line:
company = '".mysql_real_escape_string( $_POST['company'] )."',

But it looks ok to me.

I've also got validation on there, and when submitted, $_POST['company'] is going through as NOT BLANK, so something is being sent with $_POST['company'].

Any thoughts, or ideas or pointers in the right direction would be appreciated.

Cheers
Rob

EXTRA:
If I define the $company variable as follows, it works ok, updating the database:

$company = "hello";
$updateQuery = "UPDATE `{$GLOBALS['TABLE_PREFIX']}directory_listing` SET
company = '".mysql_real_escape_string( $company)."',

So that says to me something is wrong with that line when it's trying to pull COMPANY from the form.


I have also just tried defining $company before the UPDATE function like this:
$company = Trim(stripslashes($_POST['company']));
and that DOESN'T WORK.

Humz