You have an error in your SQL syntax

Question

I am getting this error:

#1064 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"insert into hall_booking(name,address,event_type,hallNo,arrival_time,arrival_da' at line 1

When running this query:

insert into hall_booking (
    name,address,event_type,hallNo,arrival_time,arrival_date,dep_time,dep_date,identity,emailid,contact,total_members,desc,catering,service,decoration,other
) values (
   '$nm','$add','$typ','$roomno','$arrv','$arrivaldate','$departure','$dDate','$idt','$emailid','$cont','$desc','200','200','200','200')

Again a problem occured in sql statement. What mistake i did?

Are you doing this on the MySQL command line? Also, have you verified your schema? — merlin2011, Mar 14 '14 at 05:34
`desc` and `identity` are keywords in sql so put them in `''` (quotes) or user some other column names — Blu, Mar 14 '14 at 05:39
You appear to be open to [SQL Injection](http://security.stackexchange.com/questions/tagged/sql-injection?sort=votes&pageSize=15). If you don't want your database to get owned, you need to use parameterized queries for this. — Clockwork-Muse, Mar 14 '14 at 05:44

score 3 · Accepted Answer · answered Mar 14 '14 at 05:37

3

You look as if you're using protected keywords as column names (you shouldn't really do this).

Try escaping them with `

insert into hall_booking (
name,address,event_type,hallNo,arrival_time,
arrival_date,dep_time,dep_date,`identity`,
emailid,contact,total_members,`desc`,catering,service,decoration,other) 
values(
'$nm','$add','$typ','$roomno','$arrv',
'$arrivaldate','$departure','$dDate','$idt',
'$emailid','$cont','$desc','200','200','200','200')

answered Mar 14 '14 at 05:37

Trent

2,909
1
31
46

Make sure you accept the answer that gave your solution. Points make the world go round :) – Trent Mar 14 '14 at 05:44

score 1 · Answer 2 · answered Mar 14 '14 at 05:43

Try this:
insert into hall_booking (name,address,event_type,hallNo,arrival_time,arrival_date,dep_time,dep_date,identity,emailid,contact,total_members,desc,catering,service,decoration,other)
values ( '".$nm."','".$add."','".$typ."','".$roomno."','".$arrv."','".$arrivaldate."','".$departure."','".$dDate."','".$idt."','".$emailid."','".$cont."','".$desc."','200','200','200','200')"

score 0 · Answer 3 · edited May 23 '17 at 11:44

0

You are getting this error because you are using a reserved keyword desc as a column name. To overcome this error you can replace your query with the following one:

insert into hall_booking (name,address,event_type,hallNo,arrival_time,arrival_date,dep_time,dep_date,`identity`,emailid,contact,total_members,`desc`,catering,service,decoration,other) values ('$nm','$add','$typ','$roomno','$arrv','$arrivaldate','$departure','$dDate','$idt','$emailid','$cont','$desc','200','200','200','200')"

Also you can refer this article for more clarification:

How do I escape reserved words used as column names? MySQL/Create Table

edited May 23 '17 at 11:44

Community

1
1

answered Mar 14 '14 at 05:39

Neels

2,547
6
33
40

mysql uses backticks, not double quotes unless certain flags are turned on (not the default), to delimit reserved words – Bohemian Mar 14 '14 at 05:40
Oh really!! You can use double quotes if ANSI SQL mode is enabled! See the post whose link I posted. And I have been doing that for quite a while now. – Neels Mar 14 '14 at 05:43

score 0 · Answer 4 · answered Mar 14 '14 at 05:43

I think you have not mentioned last value

   "INSERT INTO `hall_booking`(`name`,`address  ,`event_type`,`hallNo`,`arrival_time`,`arrival_date`,`dep_time`,`dep_date`,`IDENTITY`,`emailid`,`contact`,`total_members`,`DESC`,`catering`,`service`,`decoration`,`other`)
    VALUES('".$nm."',
           '".$add."',
           '".$typ."',
           '".$roomno."',
           '".$arrv."',
           '".$arrivaldate."',
           '".$departure."',
           '".$dDate."',
           '".$idt."',
           '".$emailid."',
           '".$cont."',
           '".$desc."',
           '200',
           '200',
           '200',
           '200',
           'Last Value')"

score 0 · Answer 5 · edited Mar 14 '14 at 06:06

You have a field which is a reserved word... desc.

Try to enclosed it with '`' character so it should be `desc`.

mysql> 
insert into hall_booking
(name,address,event_type,hallNo,arrival_time,
arrival_date,dep_time,dep_date,identity,emailid,contact,total_members,
`desc`,catering,service,decoration,other) values
('$nm','$add','$typ','$roomno','$arrv','$arrivaldate','$departure','$dDate',
 '$idt','$emailid','$cont','$desc','200','200','200','200')

You have an error in your SQL syntax

5 Answers5