Home/ Questions/Q 8782179
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-13T20:30:27+00:00

I keep getting a syntax error and I don’t know whats wrong. Can I

  • 0

I keep getting a syntax error and I don’t know whats wrong. Can I not call a predetermined string?

$sqlstring= "INSERT INTO friends (friend_id , friend_email , password , profile_name , date_started , num_of_friends)
                        VALUES (NULL , $email, $password, $name, CURDATE() , 0);";
Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    if $email, $password, $name are all varchar or string,you need to wrap themwith single quote.

    $sqlstring= "INSERT INTO friends (friend_id , friend_email , password , 
                                 profile_name , date_started , num_of_friends)
            VALUES (NULL , '$email', '$password', '$name', CURDATE() , 0)";

    your query is vunerable with SQL Injection, please take time to read the article below to protect from SQL Injction

    • 0