php/sql issue

[mbrown]

l get the following error

 

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'Grant, Building, Room, Status, Specs, WorkedOn) VALUES('123457', '555555555', 'H' at line 1

INSERT INTO equipment (DistrictTag, SerialNumber, Type, Type1, Model, DateofPurchase, Grant, Building, Room, Status, Specs, WorkedOn) VALUES('123457', '555555555', 'HP 1510 LCD Monitor', '', 'HP', '', 'None', 'WASHS', '204', 'In Use', 'None', '');

 

 

This is the query

 

$query = "INSERT INTO equipment (DistrictTag, SerialNumber, Type, Type1, Model, DateofPurchase, Grant, Building, Room, Status, Specs, WorkedOn) VALUES('$districtId', '$serialId', '$type', '$type1', '$model', '$dateofPurcahse', '$grant', '$building', '$room', '$status', '$specs', '$workedOn');";

echo "<br /><br />";
mysql_query($query, $db) or die(mysql_error($db) . '<br />' . $query);

 

what do i have wrong?

[Guardian-Mage]

I believe one of your column names is a reserved syntax word. To avoid this, surround the column names with a backtick, `, and values with a single quote, '.

 

<?php
$query = "INSERT INTO `equipment` (`DistrictTag`, `SerialNumber`, `Type`, `Type1`, `Model`, `DateofPurchase`, `Grant`, `Building`, `Room`, `Status`, `Specs`, `WorkedOn`) VALUES('$districtId', '$serialId', '$type', '$type1', '$model', '$dateofPurcahse', '$grant', '$building', '$room', '$status', '$specs', '$workedOn');";

echo "<br /><br />";
mysql_query($query, $db) or die(mysql_error($db) . '<br />' . $query);
?>

 

Oh, and Google would have given you the answers to your question

 

You might consider reading a book on SQL, a lot of people don't know how to use SQL properly.

[pocobueno1388]

If what Guardian-Mage suggested doesn't fix it, try to use mysql_real_escape_string() on all your variables.

[Guardian-Mage]

That wouldn't fix the problem because of where the error is occuring. It is not occuring in the data field section, but in the column name section.

 

-Guardian Mage

[mbrown]

Thank you all for your help. I have fixed my issue. What I did is I went into my phpmyadmin and inserted a record and see how things were there.

[mbrown]

I believe one of your column names is a reserved syntax word. To avoid this, surround the column names with a backtick, `, and values with a single quote, '.

 

<?php
$query = "INSERT INTO `equipment` (`DistrictTag`, `SerialNumber`, `Type`, `Type1`, `Model`, `DateofPurchase`, `Grant`, `Building`, `Room`, `Status`, `Specs`, `WorkedOn`) VALUES('$districtId', '$serialId', '$type', '$type1', '$model', '$dateofPurcahse', '$grant', '$building', '$room', '$status', '$specs', '$workedOn');";

echo "<br /><br />";
mysql_query($query, $db) or die(mysql_error($db) . '<br />' . $query);
?>

 

Oh, and Google would have given you the answers to your question

 

You might consider reading a book on SQL, a lot of people don't know how to use SQL properly.

 

You were correct "Type" & "Grant" were two. I ran it through PHPMYADMIn to see which ones were.