Insert Query SQL help. Syntax error

Asked Jan 05 '17 at 16:54

Active Jan 05 '17 at 19:13

Viewed 37 times

This is the code I have

static public void GenerateOrder(string Time, string Date)
{
      MySqlConnection conn = new MySqlConnection("server = localhost; uid = root; database = coursework; password = root;");
      conn.Open();
      MessageBox.Show(Date + Time);
      string statement = ("INSERT INTO order (CustomerID, Name, Date, Time, Price) VALUES(" + Users.UserID + ",'" + Users.Firstname + "','" + Date + "','" + Time + "'," + OrderPrice + ");");
      MessageBox.Show(statement);
      MySqlCommand cmd = new MySqlCommand(statement, conn);
      cmd.ExecuteNonQuery();
      MessageBox.Show("Order successfully placed.");
      conn.Close();
}

Why does it give me the Error "You have an error in your SQL Syntax"?

Please help, I have been stuck for hours In my SQL database, CustomerID is an Int, Name, Time and Data are VARCHAR(45) and the price is a double(2,2)

edited Jan 05 '17 at 19:13

hcerim

asked Jan 05 '17 at 16:54

Alfie C

1

Have you tested the generated SQL in SSMS? – David Rushton Jan 05 '17 at 16:55
SQL server or mysql? Cannot be both. – JohnHC Jan 05 '17 at 16:55
First add the complete error message and second use Prepared Statements – juergen d Jan 05 '17 at 16:55
Why 2 tags? Mssql and mysql? – Masoud Andalibi Jan 05 '17 at 16:56
1

You need to read, understand and start using parameterized queries before bobby tables comes to visit. http://bobby-tables.com/ – Sean Lange Jan 05 '17 at 16:56
*You have an error in your SQL Syntax* - this is MySQL. – juergen d Jan 05 '17 at 16:56
... `near 'order` perhaps? – Funk Forty Niner Jan 05 '17 at 16:57
This is for MySQL by the way – Alfie C Jan 05 '17 at 16:59
see the duplicate it was closed with; and look at your table name. – Funk Forty Niner Jan 05 '17 at 17:00

Insert Query SQL help. Syntax error

0 Answers0