Syntax Error mySQL Adding to DB from PHP Form

Question

So I'm trying to allow a form to add data to a mySQL table. I have this form

<form name="addBook" action="addBook.php" method="post" >
ISBN: <input type="text" name="isbn"><br />
Name: <input type="text" name="name"><br />
Edition: <input type="text" name="edition"><br />
Author: <input type="text" name="author"><br />
Class: <input type="text" name="class"><br />
Department: <input type="text" name="department"><br />
Condition: <input type="text" name="condition"><br /><br />
<input type="submit" value="Add Book">
</form>

Where addBook.php is...

<?php
$con=mysqli_connect("cclloyd.com","cclloyd","","Inventory");
// Check connection
if (mysqli_connect_errno()) {
  echo "Failed to connect to MySQL: " . mysqli_connect_error();
}

// escape variables for security
$isbn = mysqli_real_escape_string($con, $_POST['isbn']);
$name = mysqli_real_escape_string($con, $_POST['name']);
$edition = mysqli_real_escape_string($con, $_POST['edition']);
$author = mysqli_real_escape_string($con, $_POST['author']);
$class = mysqli_real_escape_string($con, $_POST['class']);
$department = mysqli_real_escape_string($con, $_POST['department']);
$condition = mysqli_real_escape_string($con, $_POST['condition']);

$sql="INSERT INTO Books (isbn, name, edition, author, class, department, condition)
VALUES ('$isbn', '$name', '$edition', '$author', '$class', '$department', '$condition')";

if (!mysqli_query($con,$sql)) {
  die('Error: ' . mysqli_error($con));
}

mysqli_close($con);

header('Location: http://umassd.cclloyd.com/bookadded.php' ) ; 
?>

And when I executed it, I get this error. "Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'condition) VALUES ('l', 'lk', 'l', 'k', 'j', 'h', 'h')' at line 1"

Where those were just random things I put in to fill the form. Where is the error? I looked online a lot and they all say to enter it like I have it.

you are inserting this literal '$isbn' and the problem montioned by @LHristov — Adil Abbasi
– Adil Abbasi, Commented Aug 10, 2014 at 9:20

LHristov · Accepted Answer · 2014-08-10 09:12:36Z

2

condition is reserved word for Mysql. Check the reserved words here

Put the word in quotes.

answered Aug 10, 2014 at 9:12

LHristov

1,1217 silver badges16 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Strawberry Over a year ago

or change the name of the column

Akram Hossain · Accepted Answer · 2014-08-10 09:15:50Z

0

Please use this

 $sql="INSERT INTO Books (`isbn`, `name`, `edition`, `author`, `class`, `department`, `condition`)
VALUES ('$isbn', '$name', '$edition', '$author', '$class', '$department', '$condition')";

answered Aug 10, 2014 at 9:15

Akram Hossain

4001 silver badge11 bronze badges

Collectives™ on Stack Overflow

Syntax Error mySQL Adding to DB from PHP Form

2 Answers 2

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related