PHP/Mysql syntax error with insert

Question

Can someone tell me where I'm wrong with my request?

$sql = "INSERT INTO order (order_id,prod) VALUES ('','".$prod."')";
mysql_query($sql) or die ('Error SQL !'.$sql.'<br />'.mysql_error());
$_SESSION['orderid']=mysql_insert_id();

Here is my table configuration:

Columns for order table:

'order_id'=>int(11) auto_increment
'prod'=> varchar(20) utf8_general_ci

And this is the error message:

Error SQL !INSERT INTO order (order_id,prod) VALUES ('','xxx') You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'order (order_id,prod) VALUES ('','xxx')' at line 1

Thank you

Please look into PDO or MySQLi for database handling. MySQL is deprecated now — Andy Holmes, Jun 30 '14 at 11:42

score 2 · Accepted Answer · edited May 25 '19 at 13:49

ORDER is a reserved keyword and happens to be the name of your column/table. To avoid syntax error, you need to escape it using backtick. E.g.

`ORDER`

MySQL Reserved Keywords List

If you have the privilege to alter the table, change the table name to which is not a reserved keyword to avoid problem from occurring again.

Waring: Please, don't use mysql_* functions in new code. They are no longer maintained and are officially deprecated. See the red box? Learn about prepared statements instead, and use PDO or MySQLi - this article will help you decide which. If you choose PDO, here is a good tutorial.

score 1 · Answer 2 · answered Jun 30 '14 at 11:43

1

Try this:

INSERT INTO `order` (order_id,prod) VALUES ('','".$prod."')

answered Jun 30 '14 at 11:43

user1094553

786
5
15

score 1 · Answer 3 · answered Jun 30 '14 at 11:47

1

replace with this, just use single quote with table name

$sql = "INSERT INTO `order` (order_id,prod) VALUES ('','".$prod."')";

answered Jun 30 '14 at 11:47

Rajendra Yadav

645
3
12

score 0 · Answer 4 · answered Jun 30 '14 at 14:40

0

$insert="INSERT INTO order (order_id,prod) VALUES ('','".$prod."')";

answered Jun 30 '14 at 14:40

Vivek Singh

2,453
1
14
27

PHP/Mysql syntax error with insert

4 Answers4