Insert htmltag into db?

jmansa

I'm trying to figure out how to insert an single htmltag into a db:

Here is what I got so far:

$rep = htmlentities('<p>');

$insert = "INSERT INTO ".$prefix."_str_replaces (from) VALUES ('$rep')";
mysql_query($insert) or die("Error: (" . mysql_errno() . ") " . mysql_error());

When running this I get this error?
Error: (1064) You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'from) VALUES ("<p>")' at line 1

What am I doing wrong?

Thanks in advance ;-)

Weedpacket

You're not escaping your inputs. See [man]mysql_real_escape_string[/man].

jmansa

Weedpacket;10992308 wrote:
You're not escaping your inputs. See [man]mysql_real_escape_string[/man].

Tryid it like this:

$insert = "INSERT INTO ".$prefix."_str_replaces (from) VALUES ('".mysql_real_escape_string($rep)."')";

Still the same error?

UWFreddy

dell plz .

Weedpacket

Oh, yes; FROM is a reserved MySQL keyword.

jmansa

Weedpacket;10992311 wrote:
Oh, yes; FROM is a reserved MySQL keyword.

Ups... Sorry... My bad ;-)

Derokorian

If you want to use MySQL keywords as column names, you have to enclose them in backticks (`) in all queries!