[SOLVED] syntax error message

[atticus]

I can't find the error:

 

Error, query failed : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ') VALUES ('album1.jpg', '38916', 'image/pjpeg', 'album1.jpg', ''

 

 

$title = $_POST[title];
$cust = $_POST[cust_id];

$query = "INSERT INTO upload2 (name, size, type, path, title, cust_id,) ".
"VALUES ('$fileName', '$fileSize', '$fileType', '$filePath', '$title', '$cust')";

mysql_query($query) or die('Error, query failed : ' . mysql_error()); 

 

it seems to come after "'$filePath',"

[marcus]

Do:

 

$title = mysql_real_escape_string($_POST['title']);
$cust = mysql_real_escape_string($_POST['cust_id']);

$query = "INSERT INTO `upload2` (`name`,`size`,`typr`,`path`,`title`,`cust_id`)
             VALUES('$fileName','$fileSize','$fileType','$filePath','$title','$cust');";

mysql_query($query) or die("Error, query failed: " . mysql_error());

 

You had an extra comma after cust_id

[atticus]

thanks, works great