Cheers Ben,
Its taken me a while to extract some sense from all that was there, but I've found a solution to the problem which works;
eg.
PHP Code:
......
<?php $who = (mysql_real_escape_string($_POST['who'])); ?>
<?php $sql = mysql_query("INSERT INTO tbl_product
(who) VALUES ('$who')") or die(mysql_error()); ?>
......
very simplistic, and not particularly secure, but for the moment,more than sufficient.
Many Thanks
Brian