mysql error

[p0pb0b]

I get an error when I have this mysql statement

$sql = "INSERT INTO " . $Table . " VALUES('', '" . addslashes($_POST['Name']) . "', '" . md5($_POST['Password']) . "')";

and this i the error
You have an error in your SQL syntax near 'VALUES('', 'test', '098f6bcd4621d373cade4e832627b4f6')' at line 1
Help anyone?

[p0pb0b]

I just changed the code to this:

$sql = "INSERT INTO user(ID,Name,Password) VALUES('', '" . addslashes($_POST['Name']) . "', '" . md5($_POST['Password']) . "')"; 

It still doesnt work.. now Im confused.. help please

[HalfaBee]

The syntax looks ok.
Are you sure the table is called user?
What is the error after the change?

HalfaBee

[p0pb0b]

Weird!
It works like this:

$name = addslashes($_POST['Name']); 
$db_pass =  md5($_POST['Password']); 
$sql = "INSERT INTO user (Name, Password) VALUES('$name', '$db_pass')"; 

I think its the " and ' whats the problem? Can somebody explain to me why those things cause it to not work? Thanks in advan

[dustbuster]

Not sure exactly what the problem was but to help you when you make any sql query try this:

//$query=your query here
$result=mysql_query($query) or die("Error: ".mysql_error());

[ahundiak]

It's because ID is probably an integer and probably auto increment. Your first insert tried to set it to a value of '' which is incorrect. If you simply skip it then the system fills it in for you. You could use the string NULL (no quotes) instead of '' and it will also work.