You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use

Question

i am facing problem in inserting image inside db, error message is:

Invalid query: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'VALUES('','$_59.jpg','��' at line 1

Query written is:

$insert=mysql_query("INSERT INTO store VALUES(id,name,image)VALUES('','$image_name','$image')") or die("Invalid query: " . mysql_error());

I am Using xamppv3.2.1, Apache/2.4.10 (Win32) OpenSSL/1.0.1i PHP/5.6.3, Server version: 5.6.21 - MySQL Community Server (GPL).

Please, [stop using `mysql_*` functions](http://stackoverflow.com/questions/12859942/why-shouldnt-i-use-mysql-functions-in-php). They are no longer maintained and are [officially deprecated](https://wiki.php.net/rfc/mysql_deprecation). Learn about [prepared statements](http://en.wikipedia.org/wiki/Prepared_statement) instead, and use [PDO](http://jayblanchard.net/demystifying_php_pdo.html). — Jay Blanchard, Apr 21 '15 at 19:46

score 4 · Answer 1 · edited May 25 '19 at 12:01

4

You have an errant VALUES keyword:

$insert=mysql_query("INSERT INTO store (id,name,image) VALUES ('','$image_name','$image')") or die("Invalid query: " . mysql_error());

FYI, if your id column is set to auto-increment you don't need to have it in your query:

$insert=mysql_query("INSERT INTO store (name,image) VALUES ('$image_name','$image')") or die("Invalid query: " . mysql_error());

Please, don't use mysql_* functions in new code. They are no longer maintained and are officially deprecated. See the red box? Learn about prepared statements instead, and use PDO or MySQLi - this article will help you decide which. If you choose PDO, here is a good tutorial.

edited May 25 '19 at 12:01

Zoe

27,060
21
118
148

answered Apr 21 '15 at 19:38

John Conde

217,595
99
455
496

i will keep dt in mind from next time. Does not using prepared statemnt causing this error? i hope not – Azra Mahrukh Apr 21 '15 at 20:03
This would have failed no matter what API you used for your database – John Conde Apr 21 '15 at 20:05
but if i do not enter image which is a blob data type the database operation is working seamless. inserting blob type data is the problem. – Azra Mahrukh Apr 21 '15 at 20:08
You probably have an incorrect format for the blob. You may need to call file_get_contents() on it for it to work. – John Conde Apr 21 '15 at 20:13
i am using the code $image=file_get_contents($_FILES['image']['tmp_name']); for that i echoed $image its displaying image in binary form. – Azra Mahrukh Apr 21 '15 at 20:36

score 2 · Answer 2 · answered Apr 21 '15 at 19:40

2

Modify your query, you are using VALUES keyword incorrectly. Modify it to:

INSERT INTO store (id,name,image) VALUES('','$image_name','$image')

I doubt your id is VARCHAR type. If it is INT type, put some integer value there.

INSERT INTO store (id,name,image) VALUES(1,'$image_name','$image')

If your id is auto increment, let db insert it

INSERT INTO store (name,image) VALUES('$image_name','$image')

answered Apr 21 '15 at 19:40

cosmos

2,263
1
17
30

id is primary key its on auto increment and ofcors int. i tried doing it like "INSERT INTO store (name,image) VALUES('$image_name','$image')" no luck – Azra Mahrukh Apr 21 '15 at 19:57

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use

2 Answers2