MySQL error - “You have an error in your SQL syntax”

Question

The error message I got:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''word','group','selfnote') VALUES ('item','a','note to self')' at line 1

The PHP code is:

$toq="INSERT INTO articles ('word','group','selfnote') 
VALUES ('$ttle','$wrdr','$snote')";

I was trying to find solutins, but they didn't seem to work as echoing gives:

INSERT INTO articles ('word','group','selfnote') 
VALUES ('item','a','note to self')

which seems nice to me. What is the problem?

Answer 1

Use backticks ` instead of quotes ' to escape names. Quotes are string delimiters.

$toq="INSERT INTO articles (`word`,`group`, `selfnote`) VALUES ('$ttle','$wrdr','$snote')";

Answer 2

You've put quotes on your field names. That forces MySQL to treat them as strings, not field names - and you can't insert into strings.

INSERT INTO articles (word, group, selfnote) VALUES (....);

is the correct syntax. The only quoting type allowed on field names is the use of backticks to escape reserved word fields, e.g.

INSERT INTO articles (table, int, varchar)  ...

would fail due to the use of 3 reserved words, but adding backticks

INSERT INTO articles (`table`, `int`, `varchar`)  ...

makes them acceptable as fieldnames.

Answer 3

You shouldn't quote column names with normal quotes (''), rather, use backticks (``).

Answer 4

You must remove or replace the quotes of the column names by backticks (`). Since "group" is a keyword, you have to use backticks:

INSERT INTO articles (`word`, `group`, `selfnote`) VALUES (....);