PHP MYSQL insert date syntax

Question

When the date need to insert into mysql table, it prompt this error-

Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '','2013-09-11','1', NULL)' at line 2

This is my source code:

if(isset($_POST['submitsub']))
{
     $stuid = $_POST['stuid'];
     $stuname = $_POST['stuname'];
     $stuemail = $_POST['stuemail'];
     $stumajor = $_POST['stumajor'];
     $appdate = date("Y-m-d");
     $appointment = $_POST['date'];
     $subno = $_POST['subject'];
     $appstatus = 1;

     $tri = mysqli_fetch_assoc(mysqli_query($con,"SELECT this_tri FROM trimester"));

     $sql = "INSERT INTO application_subject (app_no, tri_id, sub_id, stu_id, stu_name, stu_email, stu_major, app_date, appointment_date, app_status, app_remark) 
             VALUES (NULL,'$tri[this_tri]','$subno','$stuid','$stuname','$stuemail','$stumajor',$appdate','$appointment','$appstatus', NULL)";

     if (!mysqli_query($con,$sql))
     {
          die('Error: ' . mysqli_error($con));
     }

     echo'<script>alert("Your application has been submited") </script>';
     ob_flush();
}

On my mysql, the attribute of is set to date already.

On the one hand, you're missing a quote before $appdate'. On the other - you're using mysqli, so why aren't you using a prepared statement? — andrewsi
– andrewsi, Commented Aug 26, 2013 at 16:46
You are wide open to sql injection attacks, consider using parameterized queries or at least calling mysqli_real_escape_string on your inputs. — Orangepill
– Orangepill, Commented Aug 26, 2013 at 16:48

Ashley · Accepted Answer · 2013-08-26 16:47:20Z

1

You're missing a single quote before the $appdate variable in your query.

answered Aug 26, 2013 at 16:47

Ashley

1,4892 gold badges13 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

keanpedersen · Accepted Answer · 2013-08-26 16:48:11Z

1

You are missing a quote in the following:

'$stumajor',$appdate','$appointment'

It should be

'$stumajor','$appdate','$appointment'

answered Aug 26, 2013 at 16:48

keanpedersen

504 bronze badges

Comments

nohponex · Accepted Answer · 2017-01-13 18:35:08Z

1

You forgot the ' character before $appdate'

'$stumajor',$appdate'

this should be

'$stumajor','$appdate'

edited Jan 13, 2017 at 18:35

answered Aug 26, 2013 at 16:47

nohponex

581 silver badge7 bronze badges

Collectives™ on Stack Overflow

PHP MYSQL insert date syntax

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related