mysql "insert into" SQL syntax error problem

Question

this is the php code:

$stringquery = "INSERT INTO sikurim(name, title, desc, category, subcategory)

 VALUES ('$contact', '$heading','$comments', '$catF', '$catS' ) ";

mysql_query($stringquery) or die(mysql_error());

And i get the error:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'desc, category, subcategory) VALUES ('jhjh', ' fffff','fffff', '2', '4' )' at line 1

I can't find what's wrong with the code, can someone help?

Michael Berkowski · Accepted Answer · 2011-08-23 20:00:06Z

8

DESC is reserved MySQL keyword. You need to enclose it in backquotes:

$stringquery = "INSERT INTO sikurim(name, title, `desc`, category, subcategory) VALUES ('$contact', '$heading','$comments', '$catF', '$catS' )";

answered Aug 23, 2011 at 20:00

Michael Berkowski

271k47 gold badges450 silver badges395 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Vincent Savard Over a year ago

Yes, but the best would definitely be to change the column's name.

knittl Over a year ago

and please make sure you apply proper sanitation to your variables if you are interpolating them to your query!

Andrej · Accepted Answer · 2011-08-23 20:01:09Z

0

You should escape each value. Use mysql_escape_string http://www.php.net/manual/en/function.mysql-escape-string.php

answered Aug 23, 2011 at 20:01

Andrej

7,5041 gold badge22 silver badges22 bronze badges

Collectives™ on Stack Overflow

mysql "insert into" SQL syntax error problem

2 Answers 2

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related