SQL error

[NZ_Kiwis]

Maybe i've been looking to long but i can not find a error

$ground_name = $_POST['ground_name'];
$street = $_POST['street'];
$suburb = $_POST['suburb'];
$city = $_POST['city'];
$country = $_POST['country'];
$website = $_POST['website'];
$ground_phone = $_POST['ground_phone'];
$ground_fax = $_POST['ground_fax'];
$seatmap = $_POST['seatmap'];
$cap = $_POST['cap'];
$video = $_POST['video'];
$roof = $_POST['roof'];
$lights = $_POST['lights'];
$tran = $_POST['tran'];
$google = $_POST['google'];
$pic_1 = $_POST['pic_1'];
$pic_2 = $_POST['pic_2'];
$pic_3 = $_POST['pic_3'];

$result = MYSQL_QUERY("update results_ground set ground_name = '$ground_name', street = '$street', suburb = '$suburb', city = '$city', country = '$country', website = '$website', ground_phone = '$ground_phone', ground_fax = '$ground_fax', seatmap = '$seatmap', cap = '$cap', video = '$video', roof = '$roof', lights = '$lights', tran = '$tran', google = '$google', pic_1 = '$pic_1', pic_2 = '$pic_2', pic_3 = '$pic_3' where ground_id = $ground_id") or die("INSERT error: ".mysql_error()); 

Error

INSERT error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1

[Piranha]

You should make sure that the queries are safe from database injection, use [man]mysql_real_escape_string[/man] on all variables and read up a bit on database injection.

Other than that please post the query as generated by PHP, it makes it easier to debug. And first assign the sql string to a variable, then use that variable to get the results, once again easier to debug.

[bradgrafelman]

Piranha wrote:

use mysql_real_escape_string on all variables

Actually, I would recommend using [man]mysql_real_escape_string/man on variables that you expect to contain strings (since it is mysql_real_escape_string/i, after all :p). For other types of data, use a function that caters specifically to that data type.

Example: If you're expecting to receive an integer, use a function like [man]intval[/man] instead.

[Weedpacket]

Other suggestions about how to go about debugging such errors can be found in the Debugging 101 thread; in this case the first couple in particular.