Home/ Questions/Q 8492851
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-10T22:50:38+00:00

I am having problems with this MySql query: INSERT INTO groups (NAME, DESC, TIME,

  • 0

I am having problems with this MySql query:

INSERT INTO groups (NAME, DESC, TIME, OWNER) VALUES ('$GNAME', '$DESC', '$TIME', '$UID')

Essentially, the script adds the Group Name, Decription, Time and the Username of the person who registered the Group, into the mysql database.

Full script:

<?php
include_once('include/session.php');
$GNAME = $_POST['groupname'];
$DESC = $_POST['desc'];
$SPAM = $_POST['spam'];
$UID = $_POST['UID'];
$TIME = date('Y-m-d H:i:s');
if($SPAM == "queuee"){


$query ="INSERT INTO groups (NAME, DESC, TIME, OWNER) VALUES ('$GNAME','$DESC','$TIME', '$UID')";

$result = mysql_query($query) or die("There as been an Error! <hr>Error:<hr>".mysql_error() ."<br><hr><a href=\"../index.php\">Go Back</a>");
header("Location: ../group.php?id=$GNAME");
}else{
?>
The Security Question was wrong. Try Again.

<?
}
?>

I ran the Query directly into MySql itself using Phpmyadmin. However it still threw an error.
The error is:

#1064 - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'DESC, TIME, OWNER) VALUES ('$GNAME', '$DESC', '$TIME', '$UID')' at line 1

Any help at all is much appreciated and perhaps I am being a complete fool and not noticing an obvious mistake. If you need any more information just ask!

Many Thanks.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Try:

    INSERT INTO groups (`NAME`, `DESC`, `TIME`, `OWNER`) VALUES ('$GNAME','$DESC','$TIME', '$UID')";

    You’re using reserved words as column names – PHP gets terribly confused in that case.

    I should also add that your code is open to SQL injection, and you should look at moving away from using the mysql_* functions.

    The quickstart guide for mysqli is at http://www.php.net/manual/en/mysqli.quickstart.php

    PDO is another option; the information on prepared statements is at http://www.php.net/manual/en/pdo.prepared-statements.php

    • 0