You have an error in your SQL syntax - near 'left)

Question

I'm a newbie in the php programming.

I would like to apply an insert query but I get this error :

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'left) VALUES ('****df','****2135gh','***@yahoo.com' at line 2"}

$sql_insert_new_user = "insert into users (username,password,email,status,finance,province,city,address,tell,
mobile,admin_seen,type,left) VALUES ('$username','$password','$email',1,0,$town,$city,
'$address','$telephone','$mobile',0,'employe',0)";

            mysql_query($sql_insert_new_user);
            $error = mysql_error();

Your code is vulnerable to [SQL injection](http://stackoverflow.com/q/60174/4193263). Prefer using Prepared Statements. — ByteHamster, Apr 01 '15 at 09:01

score 7 · Accepted Answer · answered Apr 01 '15 at 08:54

7

left is a reserved word and in the query you need escape with backtics

`left`

https://dev.mysql.com/doc/refman/5.5/en/reserved-words.html

answered Apr 01 '15 at 08:54

Abhik Chakraborty

44,654
6
52
63

1

...or better, change the column name to something like `lft` – Apr 01 '15 at 08:55
Yeah @HoboSapiens I agree but its really hard to maintain it since the reserved words will often may get added with every newer version of mysql. Once approach is to always back-tics the column name into the query so that any word I am using today if it becomes reserved tomorrow my query will not fail. – Abhik Chakraborty Apr 01 '15 at 08:58

score 0 · Answer 2 · answered Apr 01 '15 at 09:08

0

left is a reserved word and in the query you need to use like this for all reserved word 'left'

This gives all the details about reserved word https://dev.mysql.com/doc/refman/5.5/en/reserved-words.html

answered Apr 01 '15 at 09:08

Rex Rex

1,030
1
8
29

score -1 · Answer 3 · answered Apr 01 '15 at 08:55

-1

$sql_insert_new_user = "insert into users (username,password,email,status,finance,province,city,address,tell,
mobile,admin_seen,type,`left`) VALUES ('$username','$password','$email',1,0,$town,$city,
'$address','$telephone','$mobile',0,'employe',0)";

answered Apr 01 '15 at 08:55

Vivek Singh

2,453
1
14
27

Great answer. Except I have no idea why you have posted this code. – Apr 01 '15 at 08:56
@ Hobo Sapiens what does it mean? – Vivek Singh Apr 01 '15 at 08:57
`left` is a reserved word in MySQL, so you need to enclose it in backticks if you want to use it as a column name – Barranka Apr 01 '15 at 21:07
@vivek It would help it you included a little explanation in your code, to show what is/was wrong and how did you fix it – Barranka Apr 01 '15 at 21:08

score -1 · Answer 4 · edited Apr 01 '15 at 11:23

-1

left is a mysql reserved word. So you have to rename the column left.

See here : reserved Words for furhter information

edited Apr 01 '15 at 11:23

empiric

7,825
7
37
48

answered Apr 01 '15 at 09:23

Akhil.p.p

11
4

You have an error in your SQL syntax - near 'left)

4 Answers4