PHP/Mysql syntax error with insert

Question

Can someone tell me where I'm wrong with my request?

$sql = "INSERT INTO order (order_id,prod) VALUES ('','".$prod."')";
mysql_query($sql) or die ('Error SQL !'.$sql.'<br />'.mysql_error());
$_SESSION['orderid']=mysql_insert_id();

Here is my table configuration:

Columns for order table:

'order_id'=>int(11) auto_increment
'prod'=> varchar(20) utf8_general_ci

And this is the error message:

Error SQL !INSERT INTO order (order_id,prod) VALUES ('','xxx') You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'order (order_id,prod) VALUES ('','xxx')' at line 1

Thank you

Please look into PDO or MySQLi for database handling. MySQL is deprecated now — Andy Holmes
– Andy Holmes, Commented Jun 30, 2014 at 11:42

Zoe - Save the data dump · Accepted Answer · 2019-05-25 13:49:36Z

2

ORDER is a reserved keyword and happens to be the name of your column/table. To avoid syntax error, you need to escape it using backtick. E.g.

`ORDER`

MySQL Reserved Keywords List

If you have the privilege to alter the table, change the table name to which is not a reserved keyword to avoid problem from occurring again.

Waring: Please, don't use mysql_* functions in new code. They are no longer maintained and are officially deprecated. See the red box? Learn about prepared statements instead, and use PDO or MySQLi - this article will help you decide which. If you choose PDO, here is a good tutorial.

edited May 25, 2019 at 13:49

Zoe - Save the data dump

28.4k22 gold badges130 silver badges163 bronze badges

answered Jun 30, 2014 at 11:42

Rikesh

26.5k14 gold badges82 silver badges90 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

user1094553 · Accepted Answer · 2014-06-30 11:43:49Z

1

Try this:

INSERT INTO `order` (order_id,prod) VALUES ('','".$prod."')

answered Jun 30, 2014 at 11:43

user1094553

8067 silver badges17 bronze badges

Comments

Rajendra Yadav · Accepted Answer · 2014-06-30 11:47:29Z

1

replace with this, just use single quote with table name

$sql = "INSERT INTO `order` (order_id,prod) VALUES ('','".$prod."')";

answered Jun 30, 2014 at 11:47

Rajendra Yadav

6353 silver badges12 bronze badges

Comments

Vivek Singh · Accepted Answer · 2014-06-30 14:40:12Z

0

$insert="INSERT INTO order (order_id,prod) VALUES ('','".$prod."')";

answered Jun 30, 2014 at 14:40

Vivek Singh

2,4451 gold badge16 silver badges29 bronze badges

Collectives™ on Stack Overflow

PHP/Mysql syntax error with insert

4 Answers 4

Comments

Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related