Error in SQL syntax when inserting new record to MySql

Question

With this query I get an error "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near..."

$sql = 'INSERT INTO articles (  long_text )
        VALUES ("' . mysqli_real_escape_string($conn, $long) . '")';

        if ($conn->query($sql) === TRUE) {
            echo "New record created successfully" . "<br>" ;
        } else {
            echo "Error: " . $sql . "<br>" . $conn->error;
        }

Does anyone know what is causing the problem?

Add the complete error message. learn about prepared statements — Jens
– Jens, Commented Mar 9, 2016 at 10:25
You are inserting the text inside the query sourrounded by double quote ("), while in SQL text should be sourrounded by single quote ('). — Renzo
– Renzo, Commented Mar 9, 2016 at 10:31

Saty · Accepted Answer · 2016-03-09 10:39:41Z

1

Quotes problem in your query. You are tring to write double quotes inside single quotes.

You need to change your query as prepare statement as

$stmt = $conn->prepare("INSERT INTO articles (`long_text`) VALUES (?)");
$stmt->bind_param('s', $long);
/* execute prepared statement */
$stmt->execute();

printf("%d Row inserted.\n", $stmt->affected_rows);

/* close statement and connection */
$stmt->close();

Read http://php.net/manual/en/mysqli-stmt.bind-param.php

answered Mar 9, 2016 at 10:39

Saty

22.5k7 gold badges35 silver badges52 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Error in SQL syntax when inserting new record to MySql

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related