不从链接向数据库插入数据

So when someone press this link, it should insert all the data from that text id to a new table but with the username who clicked it and the id of the text the user pressed.

The problem is, when a user clicks the link, it doesn't insert the data, what could be wrong?

The session works, so it must be something with the GET?

<?php
if(isset($_GET['collect'])) {
    $perman = $_GET['collect'];
    $username = $_SESSION['username'];

    $query = $dbh->query("INSERT INTO collections (id, ad, user) VALUES ('', $perman, $username)");
    echo 'Saving';
    echo $perman;
    header ('Refresh: 1; URL=http://localhost/de/collect.php');
}

?>

First, inserting '' for ID isn't very good (don't know if it works), don't use it (uses default), or insert NULL (uses default too, if NOT NULL). Second, to insert values it's good practice to enquote it and use escape_string on it. I think that's your problem.

$query = $dbh->query("INSERT INTO collections (ad, user) VALUES ('" . $dbh->escape_string($perman) . "', '" . $dbh->escape_string($username) . "')");

You tagged your Question with "PDO". Are you using PDO? If yes, why are you not using bindParam() or bindValue()?

If $perman and $username are strings, you've to escape them:

$query = $dbh->query("INSERT INTO `collections` (`id`, `ad`, `user`) VALUES ('', '{$perman}', '{$username}')");

That query should work, but there are still security issues. You've to escape the values. With PDO it's very simple.

General: use http://php.net/manual/en/function.mysql-error.php

Your column "id" should be Integer and have an auto_increment. Of course some IDs are Strings, but if you're able to avoid it, avoid it!

You could print out the $_GET params by using

print_r($_GET);

Edit Example with PDOStatement::bindValue():

$stmt = $dbh->prepare("INSERT INTO `collections` (`id`, `ad`, `user`) VALUES (:id, :ad, :user)");
$stmt->bindValue(":id", 123);
$stmt->bindValue(":ad", "ad");
$stmt->bindValue(":user", "username");
$stmt->execute();

You should be doing it like this...if you're using PDO

Much safer, with prepared statements

 $sql = "INSERT INTO books (id,ad,user) VALUES (:id,:ad,:user)";
 $q = $conn->prepare($sql);
 $q->execute(array(':id'=>null,':ad'=>$perman,':user'=>$username));