<?php
function add_member()
{ global $db_obj;
  $uid=$db_obj->escape_string($_REQUEST['uid']);      // (A)
  $last=$db_obj->escape_string($_REQUEST['last']);
  $first=$db_obj->escape_string($_REQUEST['first']);
  $email=$db_obj->escape_string($_REQUEST['email']);
  $pass=$db_obj->escape_string($_REQUEST['passwd']);  // (B)
  $query="INSERT INTO member VALUES ('$uid','$last',  // (C)
             '$first', '$email', PASSWORD('$pass'))"; // (D)
  return ($db_obj->query($query));                    // (E)
}
?>