syntax error

[jeff5656]

I cannot for the life of me see where in the code the error is.  I get this error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'show, comments, signoff_status) VALUES('','pt name', '12345', '03/19/08', 'yo' at line 1

 

<?php
include ("connectdb.php");

// grab the variables from the form

$patient_name = $_POST['patient_name'];
$mrn = $_POST['mrn'];
$rcf_date = $_POST['rcf_date'];
$your_name = $_POST['your_name'];
$dx = $_POST['dx'];
$show = $_POST['show'];
$comments = $_POST['comments'];


// insert the data into the database

$query = "INSERT INTO xrayconf (id_incr, patient_name, mrn, rcf_date, your_name, dx, show, comments, signoff_status)

VALUES('$id_incr', '$patient_name', '$mrn', '$rcf_date', '$your_name', '$dx', '$show', '$comments', 'a')";

mysql_query($query) or die(mysql_error());

echo "Thanks for submitting!";
?>
<table width="90%"><tr><td width="179" align="center"><a href="test.com">test.COM</a></td>

</tr></table>

 

[BlueSkyIS]

show is a MYSQL command. quote it if you have to use it.

[jeff5656]

aha! thank you!

[trq]

show is a reserved word in sql. It will need to be surrounded in `backticks`, or better still, change that field name to something else.

[uniflare]

try:

 

"INSERT INTO `xrayconf` (`id_incr`, `patient_name`, `mrn`, `rcf_date`, `your_name`, `dx`, `show`, `comments`, `signoff_status`)

VALUES('$id_incr', '$patient_name', '$mrn', '$rcf_date', '$your_name', '$dx', '$show', '$comments', 'a')";

[trq]

show is a MYSQL command. quote it if you have to use it.

 

You need to use `backticks` not 'quotes'. But its much better to change the field name to something suitable.

[BlueSkyIS]

yes, you are correct. use `backticks` if necessary. also as suggested, it's better to use suitable field names instead.

[jeff5656]

I think it would have taken a *long* time before I figured that out on my own!  I changed it to show_what.....