SQL query problem with php

eggy524

Hi, I'm creating a small shopping cart system with php and MySQL and need some help. I have a table in MySQL called 'order' with fields:

OrderID int(10) - SET AS PRIMAY KEY AND TO AUTO-INCREMENT
Username varchar(30)
OrderDate
Paid int(1)
DIspatched int(1)

I want to add a row to this table so in php I use this code:

$current_date = date('Y-m-d');
$sql = "INSERT INTO order (Username, OrderDate) VALUES ('$username' , '$current_date')";
$result = mysql_query($sql);

if(!$result)
{
die(mysql_error());
}
else
{
echo 'OK';
}

As far as i know, the fields below do not need to be inserted in my query because they have default values or otherwise:

OrderID - should automatically increment
Paid - Default value set to 1
Dispatched - Default value set to 0

The problem is that when i run this query I get the error message:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'order WHERE Username='test'' at line 1

I cant see anything wrong with this query, does anyone have any ideas?

Thanks

cgraz

I always concatenate just in case

$sql = "INSERT INTO order(Username, OrderDate) VALUES ('" . $username . "', '" . $current_date . "')";

But regardless, the mysql error message you gave and the query you gave don't correspond.

There is no WHERE clause in the INSERT statement, but there is a WHERE clause in the mysql error. This would lead me to believe that the error you are getting is for a different query.

UPDATE tbl_name SET field='value' WHERE field2='value2'

You're also missing the SET field='value' part of the clause if it is for an UPDATE.

You could also save yourself some space by doing this:

$result = mysql_query($sql) or die(mysql_error());

Roger_Ramjet

ORDER is a Reserved Word so you can't use it for a table name or column name without putting back-ticks round it. Best thing is just not to use it. Make it orders or tblOrder or something.