Query Using Mysqli Is Returning "field List" Error From $_Get

[atticus]

I know this must be a syntax error. This is the error:

 

Errormessage: Unknown column 'thisiserror' in 'field list'

 

Whatever variable I use in the URL for referrermedium is listed as the unknown column:

 

call.php?duration=127&callsource=callsource&datetime=datetime&trackingnum=123&callernum=3433&destinationnum=destinationnum&recording=recording&callername=callername&keywords=keywords&referrer=referrer&referrermedium=thisiserror&landingpage=landingpage

 

Code:

 

<?php
$callsource = $_GET['callsource'];
$duration = $_GET['duration'];
$datetime = $_GET['datetime'];
$trackingnum = $_GET['trackingnum'];
$callernum = $_GET['callernum'];
$destinationnum = $_GET['destinationnum'];
$recording = $_GET['recording'];
$callername = $_GET['callername'];
$keywords = $_GET['keywords'];
$referrer = $_GET['referrer'];
$referrermedium = $_GET['referrermedium'];
$landingpage = $_GET['landingpage'];

if ($mysqli->query("INSERT INTO calls (`callsource`, `duration`, `datetime`, `trackingnum`, `callernum`, `destinationnum`, `recording`, `callername`, `keywords`, `referrer`, `referrermedium`, `landingpage`) VALUES ($callsource, $duration, $datetime, $trackingnum, $callernum, $destinationnum, $recording, $callername, $keywords, $referrer, $referrermedium, $landingpage);") === TRUE) {
printf("Item inserted\n"); } else {printf ("Errormessage: %s\n", $mysqli->error); }
?>

[DavidAM]

You need to put quotes around your string values in the VALUES clause. Without the quotes, mysql thinks they are column names. You also need to escape them using mysqli_real_escape_string.

[atticus]

DavidAM, thanks for your help man. Worked