error in SQL

[jarv]

Please help me, I am getting the following error:

 

Upload: cctv-vectors-preview-sm.gif

Type: image/gif

Size: 17.9326171875 Kb

Temp file: C:\PHP5\upload_temp\php2186.tmp

Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''wmb_pics' ('UserID', 'fileName') VALUES ('2', 'cctv-vectors-preview-sm.gif')' at line 1

SQL: INSERT INTO 'wmb_pics' ('UserID', 'fileName') VALUES ('2', 'cctv-vectors-preview-sm.gif')

 

$result = mysql_query("SELECT * FROM wmb_members WHERE RSUSER = '".$RSUSER."'");  
if (!$result) {
    die('Invalid query: ' . mysql_error());
} else if (mysql_num_rows($result) == 1) {
    $record_set = mysql_fetch_assoc($result);
} else {
    // this means it has more or less than 1 row
    die('UNEXPECTED ERROR!');
} 

if ((($_FILES["file"]["type"] == "image/gif")
|| ($_FILES["file"]["type"] == "image/jpg")
|| ($_FILES["file"]["type"] == "image/jpeg")
|| ($_FILES["file"]["type"] == "image/pjpeg"))
&& ($_FILES["file"]["size"] < 20000))
  {
  if ($_FILES["file"]["error"] > 0)
    {
    echo "Return Code: " . $_FILES["file"]["error"] . "<br />";
    }
  else
    {
    echo "Upload: " . $_FILES["file"]["name"] . "<br />";
    echo "Type: " . $_FILES["file"]["type"] . "<br />";
    echo "Size: " . ($_FILES["file"]["size"] / 1024) . " Kb<br />";
    echo "Temp file: " . $_FILES["file"]["tmp_name"] . "<br />";
    $UserID = mysql_real_escape_string(stripslashes($_POST['UserID']));


$sql = "INSERT INTO 'wmb_pics' ('UserID', 'fileName')
VALUES ('".$UserID."', '".$_FILES["file"]["name"]."')";

$result = mysql_query($sql) or die('Error: ' . mysql_error() . '<br>SQL: ' . $sql);

header("Location: main.php"); 


    if (file_exists("upload/" . $_FILES["file"]["name"]))
      {
      echo $_FILES["file"]["name"] . " already exists. ";
      }
    else
      {
      move_uploaded_file($_FILES["file"]["tmp_name"],
      "upload/" . $_FILES["file"]["name"]);
      echo "Stored in: " . "upload/" . $_FILES["file"]["name"];
      }
    }
  }
else
  {
  echo "Invalid file";
  }

[Mchl]

For tables and columns use ``  not '' (or just don't use anything)

 

$sql = "INSERT INTO wmb_pics (UserID, fileName) VALUES ('$UserID', '{$_FILES['file']['name']}')";

[jarv]

thankyou!