error when saving tutorial to mysql database

[Rizla]

Hi,

 

I wrote a tutorial management system for my site.

When i add a normal tutorial with just html, then there's no problem.

But when i add a tutorial with php code it goes wrong and i get an error.

This error occurs when i submit the form.

 

 

This is the error:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 's a spambot and then we can terminate the code so our script stops there. We ' at line 1

 

I attached 3 files, the tutorial that i insert into the form.

The php file where i enter the tutorial into the form.

And an export file with info about the mysql table.

 

Has anyone had the same trouble???

And what am i doing wrong?

Greetings Rizl4

 

[attachment deleted by admin]

[JAY6390]

I've not checked your code, but have you used mysql_real_escape_string on your values you are inserting?

If you do this, it should work

[Rizla]

no i havent, i'll try this right now and feedback if it helps

[Rizla]

Thanks jay your tip did the trick problem solved

[JAY6390]

Cool, no problem. You should really be doing that with all your variables used in queries to prevent this sort of thing and SQL injection from occurring.