php Name Capture mysql piece

<?php // shit code made by keysle ... if you're going to use it, at least go to and leave a post in his memory http://k8r.us
	if ( $_SESSION['permissionKey'] == $_POST['securityKey'] ){
		require('../../../secure/common_includes/dbConnect.php');
		$firstName = $_POST['firstName'];
		$lastName = $_POST['lastName'];
		$email = $_POST['email'];
		$IP = @$REMOTE_ADDR;
		mysql_query("INSERT INTO oneBigStory_nameCapture (firstName,lastName,email,IP) VALUES ($firstName,$lastName,$email,$IP)");
		$_COOKIE['beenHere'] = '1';
	}
?>