Best style of inserting information into a database?

AliceH

From reading various scripts I have noticed there are many different styles of inserting information into a database.

For example here is one style:

mysql_query("INSERT INTO news (title, body) values ($title, $body)");

This is the way I have been doing it lately:

mysql_query("INSERT INTO news (title, body) values ('".$title."', '".$body."')");

// in case that's hard to read, i'm doing this: (' ".$title." ', etc...

Comments?
Is there anything wrong with the way I'm doing it?
Any big differences between the 2 styles listed?

TheIceman5

first one you will be haunted by, second one lot better, third one u missed out is a dabase class, the best one, i always use a database class for any of my database interaction, makes it lots easier and maintainable.

barand

I always use

$sql = "INSERT INTO news (title, body) values ('$title', '$body')";
mysql_query($sql);

String data should be inside ''s
Does no harm if numbers are
Backticks `` only needed if your field names are reserved words
Putting the query in a variable makes it easy to echo the query when debugging in case of problems.

hth

AliceH

is there anything wrong with this style?

mysql_query("INSERT INTO news (title, body) values ('".$title."', '".$body."')");

should i continue using it?