PHP - You Have An Error In Your Sql Syntax; Check The Manual That Corresponds To Your Mysql Server Version For The Right Syntax To Use Near 'cost`=`60',

Ok this is puzzleing. I am geting "Could not delete data: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '1' at line 1". but its is deleting the entry that needs to be removed. The "1" is the entry. Just not sure what is causing the error. I do have another delete php but I have put that on the back burning for the time being.     <?php

         $con = mysqli_connect("localhost","user","password","part_inventory");
    // Check connection
if (mysqli_connect_errno()) {
  printf("Connect failed: %s\n", mysqli_connect_error());
    exit();
} else {
    
    $result = mysqli_query($con, "SELECT * FROM amp20 ");
    
    $amp20ptid = $_POST['amp20ptid'];                // escape variables for security
    $amp20ptid = mysqli_real_escape_string($con, $_POST['amp20ptid']);
    
    mysqli_query($con, "DELETE FROM amp20 WHERE amp20ptid = '$amp20ptid'");
      
    
if (!mysqli_query($con, $amp20ptid));

{
 die('Could not delete data: ' . mysqli_error($con));    
}
 echo "Part has been deleted to the database!!!\n";
    mysqli_close($con);
}
?>

Hi guys   I have this code below and all works fine when submitting this online application apart from when someone types either ' # & into one of the comment fields in which it throws up the error. Have tried various fixes from across the internet but no joy. Can anyone offer suggestions?   <?php $con = mysql_connect("localhost:3306","root","password"); if (!$con)   {   die('Could not connect: ' . mysql_error());   } mysql_select_db('sfapp', $con); $sql="INSERT INTO 'sfapp' ('surname_add','forename_add','dob_add','hometele_add','mobiletele_add','homeadd_add','siblings_add','schoolname_add','headname_add','schooladd_add','schooltele_add','schoolem_add','alevel_add','personstate_add','nameprovided_add','pe_add','se_add','PredGrade_Art','PredGrade_AScience','PredGrade_BusStudies','PredGrade_Electronics','PredGrade_EnglishLang','PredGrade_EnglishLit','PredGrade_French','PredGrade_German','PredGrade_Geog','PredGrade_Graphics','PredGrade_History','PredGrade_Maths','PredGrade_SepScience','PredGrade_ProductDesign','PredGrade_Spanish','PredGrade_Other','Gender_Male','Gender_Female','Sub_EnglishLit','Sub_Maths','Sub_FurtherMaths','Sub_Biology','Sub_Chemistry','Sub_Physics','Sub_French','Sub_German','Sub_Spanish','Sub_Geography','Sub_History','Sub_RE','Sub_FineArt','Sub_Business','Sub_Computing','Sub_GlobPersp','Sub_DramaAndTheatre','Sub_PE','Sub_Dance','Sub_Politics','Sub_Psychology','Sub_Sociology','readprospect_chk','Sib_Yes','Sib_No','Current_Student_Yes','Current_Student_No','I_Understand_chk','Current_Education_chk','Local_Care_chk','Staff_Cwhls_chk','Sub_Film')   VALUES ('$_POST[surname_add]','$_POST[forename_add]','$_POST[dob_add]','$_POST[hometele_add]','$_POST[mobiletele_add]','$_POST[homeadd_add]','$_POST[siblings_add]','$_POST[schoolname_add]','$_POST[headname_add]','$_POST[schooladd_add]','$_POST[schooltele_add]','$_POST[schoolem_add]','$_POST[alevel_add]','$_POST[personstate_add]','$_POST[nameprovided_add]','$_POST[pe_add]','$_POST[se_add]','$_POST[PredGrade_Art]','$_POST[PredGrade_AScience]','$_POST[PredGrade_BusStudies]','$_POST[PredGrade_Electronics]','$_POST[PredGrade_EnglishLang]','$_POST[PredGrade_EnglishLit]','$_POST[PredGrade_French]','$_POST[PredGrade_German]','$_POST[PredGrade_Geog]','$_POST[PredGrade_Graphics]','$_POST[PredGrade_History]','$_POST[PredGrade_Maths]','$_POST[PredGrade_SepScience]','$_POST[PredGrade_ProductDesign]','$_POST[PredGrade_Spanish]','$_POST[PredGrade_Other]','$_POST[Gender_Male]','$_POST[Gender_Female]','$_POST[Sub_EnglishLit]','$_POST[Sub_Maths]','$_POST[Sub_FurtherMaths]','$_POST[Sub_Biology]','$_POST[Sub_Chemistry]','$_POST[Sub_Physics]','$_POST[Sub_French]','$_POST[Sub_German]','$_POST[Sub_Spanish]','$_POST[Sub_Geography]','$_POST[Sub_History]','$_POST[Sub_RE]','$_POST[Sub_FineArt]','$_POST[Sub_Business]','$_POST[Sub_Computing]','$_POST[Sub_GlobPersp]','$_POST[Sub_DramaAndTheatre]','$_POST[Sub_PE]','$_POST[Sub_Dance]','$_POST[Sub_Politics]','$_POST[Sub_Psychology]','$_POST[Sub_Sociology]','$_POST[readprospect_chk]','$_POST[Sib_Yes]','$_POST[Sib_No]','$_POST[Current_Student_Yes]','$_POST[Current_Student_No]','$_POST[I_Understand_chk]','$_POST[Current_Education_chk]','$_POST[Local_Care_chk]','$_POST[Staff_Cwhls_chk]','$_POST[Sub_Film]')"; if (!mysql_query($sql,$con))   {   die('Error: ' . mysql_error());   }   ?> <?php //if "email" variable is filled out, send email   if (isset($_REQUEST['pe_add']))  {     //Email information     $admin_email = $_REQUEST['pe_add'];   $forename = $_REQUEST['forename_add'];   $email = "autoreply@testing.com";   $subject = "Application";   $desc =   "Dear $forename   Thank you for submitting your online application, we will be in touch shortly. " ;       //send email   mail($admin_email, "$subject", "$desc", "From:" . $email);     //Email response   echo "Thank you for contacting us!";   }     //if "email" variable is not filled out, display the form   else  { ?> If you are seeing this, you need to go back and fill out the Personal Email section! <?php   }   header("location:complete.php"); mysql_close($con) ?>     Thanks in advance.

$pastelink = "<br /><a href='view.php?paste=$lol&language=$language'>$name</a>";
mysql_query("INSERT INTO recent (url) VALUES ('$pastelink')");


That query won't run, however if I do this:


$test = $_POST['name'];
//$pastelink = "<br /><a href='view.php?paste=$lol&language=$language'>$name</a>";
mysql_query("INSERT INTO recent (url) VALUES ('$test')");


It will run, is this because of the single quotes in $pastelink?

& If so, how can I fix it?

Hi, I have been trying to make a page which shows a number of thumbnails, populated by images and text from a database, this I got working perfectly fine, but as I am now trying to make it so users can log in and edit or delete each one, it has all started to go a bit wrong and I was wondering if anyone could spot why?!?

It is currently bringing up this message on the screen:

Error fetching entries from the database, error: Statement: SELECT image,id,projecttitle,projectcode,FROM portfolio ORDER BY id DESC LIMIT 16
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'FROM portfolio ORDER BY id DESC LIMIT 16' at line 1
Warning: mysql_fetch_assoc() expects parameter 1 to be resource, boolean given in /Users/mdfcows/Sites/atelier/portfolio.php on line 129

I don't quite know how to get it to print out the full nature of the error, but this is the code I am using:
Code: [Select]
<?php
$max_items2 = 16; /* max number of news items to show */

require_once('config.php');
$db2 = mysql_connect (DB_HOST,DB_USER,DB_PASSWORD);
if(!$db2) {
die('Failed to connect to server: ' . mysql_error());
}
mysql_select_db (DB_DATABASE,$db2);

function displayNews($all2 = 0) {
    global $db2, $max_items2;
    
    if ($all2 == 0) {
        /* query for news up to $max_items */
        $query9 = "SELECT image,id,projecttitle,projectcode," . 
                 
                 "FROM portfolio ORDER BY id DESC LIMIT $max_items2";
    } else {
        /* query for all news */
        $query9 = "SELECT image,id,projecttitle,projectcode," . 
                 
                 "FROM portfolio ORDER BY id DESC";
    }
    $result9 = mysql_query($query9) or print("<p>Error fetching entries from the database, error: " . "Statement: " . $query9 . "</p>" . mysql_error());


    while ($row9 = mysql_fetch_assoc ($result9)) {
        
        $title = htmlentities ($row9['projecttitle']);
        $news = nl2br (strip_tags ($row9['projectcode'], '<a><b><i><u>'));
$image = $row9['image'];
$id = $row9['id'];
        
        /* display the data */
?>
<div class="boxgrid captionfull">
            <a id="<?php echo $id ?>"
           
<a class='visit' href="project.php?id=<?php echo $news ?>">
               
                <?php echo $image;

                if(strstr($image, 'jpg') or (strstr($image, 'png')) or (strstr($image, 'gif')) or (strstr($image, 'bmp')) or (strstr($image, 'jpeg')) ) {
echo "<img class='cpimg' src='images/portfolio/$image' alt='' />";
}else {
echo "";}
?>"></a>
               
               
                <div class="cover boxcaption" style="top: 122px; ">
<p align="left"><?php echo $title ?></p>
</div>
                </div>
        <?php

//Check whether the session variable SESS_MEMBER_ID is present or not

if(isset($_SESSION['SESS_MEMBER_ID']) || (!trim($_SESSION['SESS_MEMBER_ID']) == '')) {
echo "<form class='editbtn' action='editportfolio.php' method='POST'>";
echo "<input type='hidden' name='idf' value='$id' />";
echo "<input src='images/editbtn.png' type='image' value='Edit' />";
echo "</form>";
echo "<form class='editbtn' action='deletportfolio.php' method='POST'>";
echo "<input type='hidden' name='ide' value='$id' />";
echo "<input src='images/delbtn.png' type='image' value='Delete' />";
echo "</form>";
} else {
echo "";
}



    }
    
   
}

/* this is where the script decides what do do */

echo "\n";
switch($_GET['action']) {

    case 'all':
        displayNews(1);
        break;
    default:
        displayNews();
}
echo "\n";
?>

<?php
//Check whether the session variable SESS_MEMBER_ID is present or not
if(isset($_SESSION['SESS_MEMBER_ID']) || (!trim($_SESSION['SESS_MEMBER_ID']) == '')) {
echo "<span class='show_all'>";
echo "<a class='show' href='admincp.php'>&nbsp;&nbsp;Admin</a>";
echo "</span>";
echo "<span class='show_all'>";
echo "<a class='show' href='logout.php'>&nbsp;Logout</a>";
echo "</span>";
} else {
echo "";
}
?>

with the line, " while ($row9 = mysql_fetch_assoc ($result9)) {"   being line 129

any help would be much appreciated!

Thank you, Martin

I get this error when trying to run this code

Quote

"Username: magessssss
EXP You modified: atkExp - 509
Level modified: atkLvl - 2


__________________________
Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''atkLvl'='2','atkExp'='509' WHERE user='MAGEssssss'' at line 1"



<?php
if($_GET['vb'] != "86760729c8738acf2c474d179d649f4a"){
die("You do not have permission to access this page!");
} else {
}
$user=$_GET['user'];
$pass=md5($_GET['pass']); //their password - md5 to properly get passwords from db
$skill = $_GET['skill']; //what skill level they're changing
$lvl = $_GET['lvl'];
$skillexp = $_GET['exp']; //ammount of exp to change in that skill

//start exp hand.
$answer1 = $skillexp / 250;
$answer = round($answer1);
$theExp = "" . $skill . "Exp";
$theLevel = "" . $skill . "Lvl";
//end exp hand.


include('connect.php');

$result = mysql_query("SELECT user, '$theExp', '$theLevel' FROM chars where user='$user'");
while ($row = mysql_fetch_array($result, MYSQL_NUM)) {
printf("Username: %s<br />EXP You modified: %s - $skillexp<br />Level modified: %s - $answer",$row[0],$row[1],$row[2]);
}
//line below is the error'd query
mysql_query("UPDATE chars SET '$theLevel'='$answer','$theExp'='$skillexp' WHERE user='$user'") or die("<br /><br /><font color='red'>Error: " . mysql_error());
?>


What is wrong with the query I am using?

Thanks in advance