<?include "conninfo.php";
include "header.php";
$firstname=$_POST["fname"];
$surname=$_POST["sname"];
$favfood=$_POST["ffood"];
$job=$_POST["thejob"];

//PREPARED STATEMENT VERSION
$query="INSERT INTO people(firstname,surname,favfood,job)
VALUES(?,?,?,?)";

$stmt=mysqli_stmt_init($link);
mysqli_stmt_prepare($stmt,$query);

mysqli_stmt_bind_param($stmt,"sssi",$firstname,$surname,$favfood,$job);
mysqli_stmt_execute($stmt);

mysqli_stmt_close($stmt);//close statement
mysqli_close($link);//close link to database

echo "New record added";
?>