Untitled

<?php
    $username = "salbota";
    $password = "lK8tFIGAJ_Jp";
    $hostname = "localhost";

    $dbhandle = mysql_connect($hostname, $username, $password) or die("Could not connect to database");

    $selected = mysql_select_db("salbota_users", $dbhandle);

    $myusername = $_POST['user'];
    $mypassword = $_POST['pass'];
    $mycardnum = $_POST['cardnum'];

    $myusername = stripslashes($myusername);
    $mypassword = stripslashes($mypassword);
    $mycardnum = stripslashes($mycardnum);

    $query = "SELECT * FROM cardnumbers WHERE cardnumo='$mycardnum'";
    if($mycardnum = $_POST['cardnum']){

    mysql_query("INSERT INTO users (Username, Password, cardnum) VALUES ('$user', '$pass', '$mycardnum')");
    }else{
        echo 'card number is not correct';
    }


    mysql_close();
?>

<html>
    <body>
        <h1>Signup!</h1>
            <form action="new_user.php" method="POST">
                <p>Username:</p><input type="text" name="user" />
                <p>Password:</p><input type="password" name="pass" />
                <p>Card Number:</p><input type="text" name="cardnum" />
                <br />
                <input type="submit" value="Signup!" />
            </form>
    </body>
</html>