Question

$message=$_POST['answer'];
$message=nl2br($message);
$message=strip_tags($message, '<p><a><b><i><strong><em><code><sub><sup><img><ul><ol><li>');
$message = mysql_real_escape_string($message);
$user=$_SESSION['SESS_MEMBER_ID'];
$qry="INSERT INTO forum_rules (message,author,date) VALUES ($message,$user,'".date("Y-m-d H:i:s")."')";
$result=mysql_query($qry) or die(mysql_error());
if (!$result) {
echo "error inserting data into database";
} else { 
    ...
    }

this codes always outputs error inserting data into database and i don’t see what i’m doing wrong. i hav also tried to do it without the date part but that didn’t work tho. can someone please tell me what i’m doing wrong here

Answer 1

A stated by Jared Farrish, this is probably caused by the lack of single quotes around the text variables.

VALUES ('$message','$user',