check my php mysql syntax please

[Looktrne]

can you tell me if there is something wrong with this syntax? I keep getting errors with the syntax

 

$sql = "UPDATE Profiles SET
City = 			'$row[city]',
Headline =		'$row[name]',
LookingFor = '$lf',
DescriptionMe = '$desc',
DateOfBirth 	 ='$bd',
Zip=			'$row[zipcode]' WHERE ID='$row[member_id]'";		

 

thanks for any help with this

 

Paul

[pocobueno1388]

The error being?

[Looktrne]

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '7" with straight long hair. I like fashion, so my clothing style is a combinati' at line 5

[pocobueno1388]

Do this and copy and paste what you see:

 

<?php

$sql = "UPDATE Profiles SET
City = 			'$row[city]',
Headline =		'$row[name]',
LookingFor = '$lf',
DescriptionMe = '$desc',
DateOfBirth 	 ='$bd',
Zip=			'$row[zipcode]' WHERE ID='$row[member_id]'";

$result = mysql_query($sql)or die(mysql_error() . "<p>With Query:<br>$query");

[Looktrne]

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '7" with straight long hair. I like fashion, so my clothing style is a combinati' at line 5

 

With Query:

 

 

 

 

looks the same....I am worried the variable I am uploading does not take... because I am not using stripslashes or whatever...

 

can you tell me how to clean a variable for mysql

 

Paul

[pocobueno1388]

Thats strange, after the "With Query:" part it was supposed to show your query, and it came out blank...unless you left that part out.

 

to clean a variable for database insertion you want to use mysql_real_escape_string() on it. It will probably solve your problem if you do that to all the variables.

[kenrbnsn]

That's because the OP's query variable is $sql, not $query. It should be:

<?php
$result = mysql_query($sql)or die(mysql_error() . "<p>With Query:<br>$sql");
?>

 

Ken