[SOLVED] Error in Select query

[CincoPistolero]

Does anyone see a problem with the below SELECT statement. I am getting the following error:

UPDATE contact SET state='MT',main='',firstName='new',lastName='pooh,contactTitle='goo', address='',city='',zip='',contactPhone1='',contactPhone2='', fax='',email1='',email2='',directions='',directionsImageLink='', active='1' WHERE contactID='2' . You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'goo', address='',city='',zip='',contactPhone1='',contactPhone2

 

 

<?php
$query = "UPDATE contact SET state='$state',mainPage='$mainPage',firstName='$firstName',lastName='$lastName,contactTitle='$contactTitle',
address='$address',city='$city',zip='$zip',contactPhone1='$contactPhone1',contactPhone2='$contactPhone2',
fax='$fax',email1='$email1',email2='$email2',directions='$directions',directionsImageLink='$directionsImageLink',
active='$active' WHERE contactID='$contactID' ";
$result = mysql_query($query) or die ("<div id='main'><center>Error in query: $query. " . mysql_error()."</center></div>");
?>

[Patrick3002]

Does anyone see a problem with the below SELECT statement. I am getting the following error:

UPDATE contact SET state='MT',main='',firstName='new',lastName='pooh,contactTitle='goo', address='',city='',zip='',contactPhone1='',contactPhone2='', fax='',email1='',email2='',directions='',directionsImageLink='', active='1' WHERE contactID='2' . You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'goo', address='',city='',zip='',contactPhone1='',contactPhone2

 

 

<?php
$query = "UPDATE contact SET state='$state',mainPage='$mainPage',firstName='$firstName',lastName='$lastName,contactTitle='$contactTitle',
address='$address',city='$city',zip='$zip',contactPhone1='$contactPhone1',contactPhone2='$contactPhone2',
fax='$fax',email1='$email1',email2='$email2',directions='$directions',directionsImageLink='$directionsImageLink',
active='$active' WHERE contactID='$contactID' ";
$result = mysql_query($query) or die ("<div id='main'><center>Error in query: $query. " . mysql_error()."</center></div>");
?>

 

 

Try using mysql_real_escape_string on all of the vars in the UPDATE query.

 

 

Put this code before the $query

$state = mysql_real_escape_string($state);
$mainPage = mysql_real_escape_string($mainPage);
$firstName = mysql_real_escape_string($firstName);
$lastName = mysql_real_escape_string($lastName);
$contactTitle = mysql_real_escape_string($contactTitle);
$address = mysql_real_escape_string($address);
$city = mysql_real_escape_string($city);
$zip = mysql_real_escape_string($zip);
$contactPhone1 = mysql_real_escape_string($contactPhone1);
$contactPhone2 = mysql_real_escape_string($contactPhone2);
$email1 = mysql_real_escape_string($email1);
$email2 = mysql_real_escape_string($email2);
$directions = mysql_real_escape_string($directions);
$directionsImageLink = mysql_real_escape_string($directionsImageLink);
$active = mysql_real_escape_string($active);
$contactID = mysql_real_escape_string($contactID);

[CincoPistolero]

I still get the same error. I use this same code on other modify pages, and it works fine.

[Patrick3002]

Try using this query:

 

<?php
$query = "UPDATE `contact` SET state=\"$state\", mainPage=\"$mainPage\", firstName=\"$firstName\", lastName=\"$lastName\", contactTitle=\"$contactTitle\", address=\"$address\", city=\"$city\", zip=\"$zip\", contactPhone1=\"$contactPhone1\", contactPhone2=\"$contactPhone2\", fax=\"$fax\", email1=\"$email1\", email2=\"$email2\", directions=\"$directions\", directionsImageLink=\"$directionsImageLink\", active=\"$active\" WHERE contactID='$contactID' ";
$result = mysql_query($query) or die ("<div id='main'><center>Error in query: $query. " . mysql_error()."</center></div>");
?>

[Patrick3002]

If that doesn't work then this will deffinatly work with the mysql_real_escape_string script i gave you earlier.

 

 

<?php
$query = "UPDATE contact SET state='$state',mainPage='$mainPage',firstName='$firstName',lastName='$lastName',contactTitle='$contactTitle',
address='$address',city='$city',zip='$zip',contactPhone1='$contactPhone1',contactPhone2='$contactPhone2',
fax='$fax',email1='$email1',email2='$email2',directions='$directions',directionsImageLink='$directionsImageLink',
active='$active' WHERE contactID='$contactID' ";
$result = mysql_query($query) or die ("<div id='main'><center>Error in query: $query. " . mysql_error()."</center></div>");
?>

[monk.e.boy]

 

UPDATE contact SET state='MT',main='',firstName='new',lastName='pooh,contactTitle='goo', address='',city='',zip='',contactPhone1='',contactPhone2=''......

 

 

you are missing a quote after pooh

 

monk.e.boy

[CincoPistolero]

that fixed it