Y2S2 - insert.php

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8">
        <title>Input</title>
    </head>
<body>
    <form action="" method="POST">
        <pre>
            Име:                <input type="text" name="firstname" required>
            Фамилия:            <input type="text" name="lastname" required>
            Адрес:              <input type="text" name="address" required>
            Телефон:            <input type="text" name="phonenumber" required>
            Година на издаване: <input type="text" name="year" required>
            <input type="submit" name="submit" value="Въведи">
        </pre>
    </form>
    <?php
    include 'config.php';
    if (isset($_POST["submit"]))
    {
        $firstname = $_POST["firstname"];
        $lastname = $_POST["lastname"];
        $address = $_POST["address"];
        $phonenumber = $_POST["phonenumber"];
        $year = $_POST["year"];
        if (!empty($firstname) && !empty($lastname) && !empty($address) && !empty($phonenumber) && !empty($year))
        {
            $sql = "INSERT INTO Chitateli (firstname, lastname, address, phonenumber, year) VALUE('$firstname', '$lastname', '$address', '$phonenumber', '$year')";
                    $result = mysqli_query($dbConn, $sql);
                    if (!$result)
                    {
                        die('An ERROR has occured');
                    }
                    echo "MESSAGE > Successfully added data to database";
        }
        else
        {
            echo "ERROR > Please enter on all fields";
        }
    }
    $query = "SELECT * FROM Chitateli";
    $result = mysqli_query($dbConn, $query);
    $count = mysqli_num_rows($result);
    if ($count > 0)
    {
        echo "<table border='2'><tr><th>Номер на читателска карта</th><th>Име</th><th>Фамилия</th><th>Адрес</th><th>Телефон</th><th>Година на издаване</th>";
        while ($row = mysqli_fetch_array($result))
        {
            echo "<tr><td>" . $row["id"] . "</td><td>" . $row['firstname'] . "</td><td>" . $row['lastname'] . "</td><td>" . $row['address'] . "</td><td>" . $row['phonenumber'] . "</td><td>" . $row['year'] . "</td></tr>";
        }
        echo "</table>";
    }
    ?>
</body>
</html>