php database insert not working according to plan

Question

This code is throwing an error i tried to troubleshoot but I'm missing something . Since I wrote it I'm overlooking a syntax error. Any help ?

$kql="
INSERT INTO References (Email, Company1, Person1, Contact1, Company2, Person2, Contact2, Company3, Person3, Contact3, Company4, Person4, Contact4, Company5, Person5, Contact5)
VALUES ( '$company44','$Company', '$Person', '$Contact', '$Company1', '$Person1', '$Contact1', '$Company2', '$Person2', '$Contact2', '$Company3', '$Person3', '$Contact3', '$Company4', '$Person4', '$Contact4')";

The error is

Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'References (Email, Company1, Person1, Contact1, Company2, Person2, Contact2, Com' at line 1

I think it throws an error because References is actually a keyword (atleast for MySQL). Try doing a simple SELECT in the table, if the error still occurs — Carl Binalla
– Carl Binalla, Commented Oct 3, 2018 at 7:27
Try to insert the query using phpMyadmin by replacing the variable with a dummy data — Harish Karthick
– Harish Karthick, Commented Oct 3, 2018 at 7:27
Please do not create SQL queries by joining strings together. You should always use parametrised queries, otherwise you have a significant security risk from SQL injection. Also, using a parametrised form will make your code much more robust. For example, as it stands, if $person was a "Mr O'brien" his name would close your quotation mark in the middle of his name, causing a new syntax error. — Dragonthoughts
– Dragonthoughts, Commented Oct 3, 2018 at 7:59

Cid · Accepted Answer · 2018-10-03 07:57:46Z

1

REFERENCES Is a SQL keyword used to define a foreign key.

If you have a table/col named with a SQL keyword, you have to wrap the table/col name into specific characters.

MySQL

INSERT INTO `References` (...) ...

MS SQL

INSERT INTO [References] (...) ...

Postgre SQL

INSERT INTO "References" (...) ...

I'm not sure concerning pgSQL, can someone confirm?

In example, nothing (but common sense) prevents you from creating a database named INSERT with a table INTO having a column VALUE(42)

This query works :

USE [INSERT]
SELECT [INTO].[VALUE(42)] FROM [INTO]

edited Oct 3, 2018 at 7:57

answered Oct 3, 2018 at 7:34

Cid

15.3k4 gold badges33 silver badges49 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

php database insert not working according to plan

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related