Problem with sql syntax

Chris_Evans

Hi there,
I've been working on this little problem for several days now, and as hard as I try I can't crack it, I've even tried it on another computer without success.

I get the following error:

You have an error in your SQL syntax near 'group='intergrated'' at line 1

...when I goto http://localhost/ssi/sections.php?id=1&group=intergrated when I use this code:

			<?
			if ($_GET['group'] == '')
				{
				$group = 'main';
				}
			else
				{
				$group = $_GET['group'];
				}

		$lmenu = mysql_query("SELECT name,link FROM menu WHERE menu='left' AND group='$group'")
			or die(mysql_error());
		While ($row = mysql_fetch_array($lmenu))
			{
			echo '<tr><td><a href="$siteurl/';
			echo $row['sublink'];
			echo $row['link'];
			echo '">';
			echo $row['name'];
			echo '</a></td></tr>';
			}
		mysql_free_result($lmenu);
		?>

Any help would be appreciated.

Thank you,

Chris

John_Canyon

$lmenu = mysql_query("SELECT name,link FROM menu WHERE menu='left' AND group='$group'")
or die(mysql_error());

Try changing that to:

$lmenu = mysql_query("SELECT name,link FROM menu WHERE menu='left' AND group='".addslashes($group)."'")
or die(mysql_error());

Should solve your problem.

Cheers

Chris_Evans

Hi - Just tried that, it didn't work... but then addslashes removes the '"\/'; etc doesn't it? But this is in the url:

Spacing it out so it doens't compact it like it did before.

[url]http://[/url] localhost /ssi/ sections.php?id=1&group=intergrated

Thanks,

Chris

John_Canyon

Ahh, sorry i see your problem.

You are using a name that mySQL needs.
You cannot use "group" as a column name
in your table because "group" is reserved.

Thus it is giving you a SQL error because it
thinks you are trying to GROUP BY data rather
then select a column.

Change the FIELD name and it will work.

Cheers.

Chris_Evans

Yay! Thank you very much.

Greatly appreciated.