The first problem is that you are not using mysql_real_escape_string() to escape your input before using it in a query.

The second problem is that your script will fail if there are two entries for the e-mail address in the database.

__________________
Dan LeFree | Product Manager (Linux VPS Hosting) | Owner/Operator (Web development, marketing)