Variable at POST - php

Question

In this code you can see arraying data from MySQL database and preparing them to change.
But I have a problem with a variables $_POST[$here]. How do I can insert the variable to that place. Read the code for better understanding. This code does not work. Are there some other ways. Or that is impossible to do something like this thing. If I do not use variables that changing me every or no one value. I am crying right now, that is so frustrating problem. Thanks for every answer...
while ($row = mysql_fetch_array($result) or die(mysql_error())){
$link = $row['link'];
$tittle = $row['tittle'];
$content= $row['content'];
echo "<div>";
echo "<form name='"; echo $link; echo "' method='POST' action='login.php'>";
echo "<h1>"; echo $link; echo "</h1>";
echo "<h3>"; echo $tittle; echo "</h3>";
echo "<input type='text' name='"; echo $link; echo "tittle'>";
echo "<h3>"; echo $content; echo "</h3>";
echo "<textarea name='"; echo $link; echo "content'></textarea>";
echo "<input type='submit' name='"; echo $link; echo "' value='change'>";
echo "</form>";
echo "</div>";
$var1 = $link."tittle"; $titt = $_POST[$var1];
$var2 = $link."content"; $ten = $_POST[$var2];
mysql_query("UPDATE inbox SET tittle='".$titt."', content='".$ten."' WHERE link='".$link."'");
echo $link;
}
I fixed that!!!

Answer 1

There is a lot of wrong with your code:
You use mysql_* functions instead of PDO
You don't escape your $_POST value exposing your website for any hacker to hack into. At least use mysql_real_escape_string(), but see point 1
You define $titt and then use $tit, which causes an error
You keep echoing instead of simply concatenating a string and then echoing that string
There's a lot to fix...

Answer 2

Excluding the security errors, you can try this:
while ($row = mysql_fetch_array($result) or die(mysql_error())){
$link = $row['link'];
$tittle = $row['tittle'];
$content= $row['content'];
echo "<div>";
echo "<form name='" . $link . "' method='POST'>";
echo "<h1>" . $link . "</h1>";
echo "<h3>" . $tittle . "</h3>";
echo "<input type='text' name='" . $link . "tittle'>";
echo "<h3>" . $content . "</h3>";
echo "<textarea name='" . $link . "content'></textarea>";
echo "<input type='submit' name='" . $link . "' value='change'>";
echo "</form>";
echo "</div>";
$var1 = $link."tittle";
$var2 = $link."content";
if (isset($_POST[$var1]) and isset($_POST[$var2])) {
$titt = $_POST[$var1];
$ten = $_POST[$var2];
mysql_query("UPDATE inbox SET tittle='".$titt."', content='".$ten."' WHERE link='".$link."'");
}
echo $link;
}