Check the manual??

Dr_Freak2

Hello,everyone 🙂 .I am new here.And I have got a problem regarding SQL with PHP.
I used to use SQL in VB.NET and PHP.However,I recently compile a PHP script with INSERT SQL got error.The error shows:

You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'From,UserName,Password,EmailAddress,Gender,Interest,Age) VALUES

This error is quite strange to me because my SQL syntax doesn't stop at the VALUES .By the way,my PHP script is as follows:

$conn->add("INSERT INTO members (From,UserName,Password,EmailAddress,Gender,Interest,Age) VALUES ('".$POST['from']."','".$POST['username']."','".$POST['password']."','".$POST['email']."','".$POST['gender']."','".$POST['interest']."','".$_POST['age']."')");

When I omit the $_POST["from"],the script works.The data setting of FROM value in MySQL is ENUM.But I do think it ain't a problem.Do you guys have any suggestions?Many thanks.😉

laserlight

Maybe there's some confusion because From is a keyword?

Maybe try:

$conn->add("INSERT INTO `members`
	(`From`, `UserName`, `Password`, `EmailAddress`, `Gender`, `Interest`, `Age`)
	VALUES('"
	. $_POST['from'] . "', '"
	. $_POST['username']. "','"
	. $_POST['password']. "', '"
	. $_POST['email']. "', '"
	. $_POST['gender']."','"
	. $_POST['interest'] ."','"
	. $_POST['age']. "')
	");

Dr_Freak2

Hey,laserlight,thank you so much! Besides,I want to know why.

Basically,why do I have to quote 'members',<-table name,and several other columns name in the SQL syntax?I just can't figure out.When I was compiling my VB.NET,ASP project,I don't have to quote these.Do you have any ideas?

Again,thank you so much!

laserlight

You dont have to quote them.
In this case, "From" is a keyword in SQL, so I presumed that was the problem.
By enclosing it in backticks, that is solved, and since we're doing it for one name, might as well do it for all the names.

Dr_Freak2

Yeah,you remind me something which is very important, 'FROM' is a keyword in SQL.
You are very smart!🙂