mysql_real_escape_string issue in php code

[mattiesams]

hi,

 

when i try to add inter'l in the field i'm getting below error message.

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'L', '')' at line 4

 

but i have put

$sql = "UPDATE inv SET ";

$sql .= ", TO_LOC3 = '".mysql_real_escape_string($_SESSION['dloc3'])."'";

$sql .= " WHERE JOB_NO = ".$_SESSION['jobno'];

 

but when i go back using back button , i can see that inter'l  already in the field.

then again if i tried to delete that , then i'm getting above error message.

this is how i call data

$sql = "SELECT * FROM inv WHERE JOB_NO = ".$id;

$db->query($sql);

if ($row = $db->next_record()) {

$_SESSION['dloc3'] = stripslashes($row['TO_LOC3']);

 

 

can someone help me please to solve this

many thanks

 

 

[trq]

This comma (in red) should not be there.

 

$sql .= ", TO_LOC3 = '".mysql_real_escape_string($_SESSION['dloc3'])."'";

[mattiesams]

, is there because there are lot of other fields i'm inserting into DB. i've used only this line to show u what i'm trying to do.

 

 

deos anyone has an idea how to fix this bug?

 

 

[trq]

echo $sql and lets see what you have.

[mattiesams]

if that field is total empty if i try to input internation'l there, then i get then i'll get this error

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'L')' at line 4

 

then when i go back clicking back on error screen then i can see internation'l

 

when i echo sql i can see internation'l

 

[trq]

echo $sql and lets see what you have.