Untitled

//Index.php
<!DOCTYPE HTML>
<html>
<head>
<title>VIP System - Add a VIP</title>
<style>
.error {color: #FF0000;}
</style>
</head>
<body>
<?php
// define variables and set to empty values
$steamErr = $daysErr = "";
$steamid = $days = "";

if ($_SERVER["REQUEST_METHOD"] == "POST") {
  if (empty($_POST["steamid"])) {
    $steamErr = "steamid is required";
  } else {
    $steamid = test_input($_POST["steamid"]);
  }

  if (empty($_POST["days"])) {
    $daysErr = "days is required";
  } else {
    $days = filter_var( $_GET["days"], FILTER_VALIDATE_INT);
  }
}

function test_input($data) {
  $data = trim($data);
  $data = stripslashes($data);
  $data = htmlspecialchars($data);
  return $data;
}
?>

<h2>Add a V.I.P</h2>
<p><span class="error">* Required Field.</span></p>
<form method="post" action="dbstaff.php">
  SteamID: <input type="text" name="steamid">
  <span class="error">* <?php echo $steamErr;?></span>
  <br><br>
  Days: <input type="text" name="days">
  <span class="error">* <?php echo $daysErr;?></span>
  <br><br>
  <input type="submit" name="submit" value="Submit">
</form>

</body>
</html>

//dbstaff
<?php require 'includes/database.php';


try {
	$conn = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password);
	// set the PDO error mode to exception
	$conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
	$sql = "INSERT INTO users (steamid, time) VALUES ('$steamid', '$days')";
	// use exec() because no results are returned
	$conn->exec($sql);
	echo "User has been added successfuly for a VIP ";
	}
	catch(PDOException $e)
	{
		echo $sql . "<br>" . $e->getMessage();
	}
	$conn = null;
?>

//Includes/database.php
<?php
$servername = "db4free.net";
$username = "xxxxxxx";
$password = "xxxxxx";
$dbname = "xxxxxxxx";
?>