Why can't i insert into mysql database using php?

Question

this is my code:

 $query = "INSERT INTO accounts (name, mail, group, year, active, password) VALUES  ('$name', '$email', '$group', '$year', '1', '$pass')";          
 $result = mysql_query($query) or DIE(mysql_error());

this is my DB

Field -  Type 
id       int(11) (auto increment)
name     varchar(30)
mail     varchar(30)
group    varchar(4)
year     varchar(3)
active   tinyint(1)
password varchar(36)

and i get this error:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'group, year, active, password) VALUES ('Smith S. Ana Joy', 'ana' at line 1

an example or the variables that i am adding:

$name = Smith
$email = ana.smith
$group = A1
$year = I
$active = 1
$pass = a

possible duplicate of Syntax error due to using a reserved word as a table or column name in MySQL — Amal
– Amal, Commented May 4, 2014 at 17:34

Pekka · Accepted Answer · 2011-09-10 12:37:24Z

3

GROUP is a reserved word in mySQL.

Wrap it in backticks:

`group`

or use a different column name.

Also make sure your code is protected against SQL injection (i.e. each variable is being sanitized before being inserted into the code).

answered Sep 10, 2011 at 12:37

Pekka

451k150 gold badges989 silver badges1.1k bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Wrenbjor Over a year ago

Always quote your queries. you have a few keywords in there, "group", "password", and "year" are all mysql keywords. $query = "INSERT INTO accounts (name, mail, group, year, active, password) VALUES ('$name', '$email', '$group', '$year', '1', '$pass')"; $result = mysql_query($query) or DIE(mysql_error());

Mat · Accepted Answer · 2011-09-10 12:37:27Z

1

GROUP is a reserved word. You should quote that column name:

... mail, `group`, ...

answered Sep 10, 2011 at 12:37

Mat

208k41 gold badges407 silver badges423 bronze badges

Comments

Lars · Accepted Answer · 2011-09-10 12:37:50Z

1

group is a MYSQL-command and may not be used like that in a value. Escape the field like so:

"INSERT INTO accounts (name, mail, \"group\", year, active, password) VALUES ('$name', '$email', '$group', '$year', '1', '$pass')";

answered Sep 10, 2011 at 12:37

Lars

5,8194 gold badges29 silver badges57 bronze badges

Comments

Marcus · Accepted Answer · 2011-09-10 12:39:21Z

1

Group is a reserverd word in MySQL and therefore you must qoute it. You can read more about it here: http://dev.mysql.com/doc/refman/5.5/en/reserved-words.html

answered Sep 10, 2011 at 12:39

Marcus

12.6k5 gold badges50 silver badges66 bronze badges

Comments

CodeCaster · Accepted Answer · 2011-09-10 12:38:05Z

0

group is a reserved keyword, you should enclose it in backticks.

answered Sep 10, 2011 at 12:38

CodeCaster

153k24 gold badges237 silver badges287 bronze badges

Collectives™ on Stack Overflow

Why can't i insert into mysql database using php?

5 Answers 5

1 Comment

Comments

Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

5 Answers 5

1 Comment

Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related