insert with ' not working

[flemingmike]

hello, i am returning the error in the following code.  im i doing something wrong?

 

 

{$sql = "UPDATE jobs SET contact = ' . mysql_real_escape_string{$_POST['contact']} .', contactphone = ' . mysql_real_escape_string{$_POST['contactphone']} .', customer = ' . mysql_real_escape_string{$_POST['customer']} .', initial = ' . mysql_real_escape_string{$_POST['initial']} .', address = ' . mysql_real_escape_string{$_POST['address']} .', city = ' . mysql_real_escape_string{$_POST['city']} .', postal = ' . mysql_real_escape_string{$_POST['postal']} .', province = ' . mysql_real_escape_string{$_POST['province']} .', description = ' . mysql_real_escape_string{$_POST['description']} .', mechanic = ' . mysql_real_escape_string{$_POST['mechanic']} .', ponumber = ' . mysql_real_escape_string{$_POST['ponumber']} .', status = ' . mysql_real_escape_string{$_POST['status']} .' WHERE id = '$id";   $result = mysql_query($sql) or die('Error, updating job failed.  Check you fields and try again.');echo "<center> You have successfully updated the new job.  You can see your changes below.";}

 

[trq]

Your mixing single and double quotes.

[flemingmike]

so should

' . mysql_real_escape_string{$_POST['contact']} .'

 

 

really be

" . mysql_real_escape_string($_POST['contact']) ."

 

[trq]

Whenever you have an opening double quote, you need a closing double quote. Same goes for single quotes. If you open with a single, you need to close with a single.

[flemingmike]

i thought i did that...?

[flemingmike]

ookkkk....  i get it now,  thanks.