<?php

$hostname = 'localhost';
$username = 'codinglo_dev';
$password = 'dev123';

$database = 'codinglo_dev';

$con = mysql_connect($hostname, $username, $password) or die(mysql_error()); // I would avoid using or dies for MySQL, but that's just me.

mysql_select_db($database) or die(mysql_error());

// We need to sanitize the user input.
// First mysql_real_escape_string makes sure nothing "unexpected" is going in MySQL.
// htmlspecialchars removes any HTML formatting that is not needed.
$name = mysql_real_escape_string(htmlspecialchars($_POST['name']));
$body = mysql_real_escape_string(htmlspecialchars($_POST['body']));

$query = mysql_query("INSERT INTO blog (name, body) VALUES('$name', '$body')");

    if(empty($name) || empty($body)) {
    die('Can\'t add empty fields.');
}
    elseif ($query == true) {
    echo 'Message submitted.';
}
    else {
    die('Entry wasn\'t added');
}

?>