MySQL syntax error on escaped string

Question

MySQL is giving a 1064 on an escaped string.

$date is set above.
$article_clean = mysqli_real_escape_string($dbc,$article);
$guid_clean= mysqli_real_escape_string($dbc,$guid_clean);
$pub_date_clean = mysqli_real_escape_string($dbc,$pub_date);
$title_clean = mysqli_real_escape_string($dbc,$title);
$query = "INSERT INTO blog_post (date,article,link,pub_date,title) VALUES ('$date',$article_clean','$guid_clean','$pub_date_clean','$title_clean')";

mysqli_query($dbc, $query);

Why?

@piotrm THANK YOU!!!! I guess after a few hours I should take a break. — Cjueden
– Cjueden, Commented Jan 23, 2012 at 4:56
Just something I noted, if you're using mysqli, why don't you use prepared statements? — Mike
– Mike, Commented Jan 23, 2012 at 5:15
@Mike I guess I don't know about those. Do you have any information on that? — Cjueden
– Cjueden, Commented Jan 23, 2012 at 5:54
Prepared statements are one of the main advantages of mysqli instead of mysql_* functions. Check the documentation here: php.net/manual/en/mysqli.prepare.php — Mike
– Mike, Commented Jan 23, 2012 at 23:10

Bajrang · Accepted Answer · 2012-01-23 04:57:49Z

1

You have missed a single quote, Rewrite your query line with this one:-

$query = "INSERT INTO blog_post (date,article,link,pub_date,title) VALUES ('$date','$article_clean','$guid_clean','$pub_date_clean','$title_clean')";

answered Jan 23, 2012 at 4:57

Bajrang

8,6795 gold badges29 silver badges40 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

paxdiablo · Accepted Answer · 2012-01-23 05:06:17Z

1

$query = "INSERT INTO blog_post (blah blah) VALUES ('$date',$article_clean', ...)";
                                                            ^

You have no opening quote for this argument. You need to add one.

On top of that, this statement looks suspicious:

$guid_clean = mysqli_real_escape_string ($dbc, $guid_clean);

All the others act on the "unclean" version to produce the clean one. Unless you've already set guid_clean somehow, it probably should be:

$guid_clean = mysqli_real_escape_string ($dbc, $guid);

As I say, that's not necessarily the case but I'd check it to make sure.

edited Jan 23, 2012 at 5:06

answered Jan 23, 2012 at 4:57

paxdiablo

888k243 gold badges1.6k silver badges2k bronze badges

Comments

alxbrd · Accepted Answer · 2012-01-23 04:57:28Z

0

Try to get a better PHP IDE to get over these problems easily.

answered Jan 23, 2012 at 4:57

alxbrd

1,7051 gold badge15 silver badges16 bronze badges

1 Comment

alxbrd Over a year ago

Eclipse is quite good. I am using PHPStorm now. There is a trial version available, you can give it a try.

Collectives™ on Stack Overflow

MySQL syntax error on escaped string

3 Answers 3

Comments

Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related