[SOLVED] SQL Syntax error

[mike12255]

I have the following code:

 

$id=$_GET['id'];

$query  = "SELECT locked FROM forumtutorial_posts WHERE postid = $id";

$result = mysql_query($query) or die(mysql_error());

    $record = mysql_fetch_assoc($result);

if ($record['locked'] < 1 ){

if(isset($_POST['submit']))

 

and when i run it on my server i get the error :

 

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1

 

idk i cant see anything wrong, but then again im really tired. Thanks for the help

[Lodius2000]

try putting angle brackets around id

 

{$id}

 

thats always my first troubleshoot with sql syntax errors, is to put those around all variables

[mike12255]

getting the same error still

[Philip]

"SELECT `locked` FROM `forumtutorial_posts` WHERE `postid` = '{$id}'"

[mike12255]

Thanks mate that worked! but before i hit topic solved mabey somone can answer one more question i have. What do the "`" is the following code mean/stand for/do?

 

SELECT `locked` FROM `forumtutorial_posts` WHERE `postid` = '{$id}'" 

[Philip]

The backticks (`) are like normal single quotes (') for table and column names - they are for identifiers.

 

locked is a mysql keyword (if i remember correctly), thus breaking your query.

 

See more here:

http://dev.mysql.com/doc/refman/5.0/en/identifiers.html

 

[mike12255]

strange the query worked without those in another php file of mine :S anyway thanks for the help mates.