MySQL error?

[kitty-kitty]

The error:

Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'on) VALUES ('08/26/10, 20:04:40', '1', 'here is a reply using the script instead' at line 1

The query:

@mysql_query("INSERT INTO topicreplys (postedon, posterid, message, on) VALUES ('$date', '$uid', '$message', '$pid')") or die("Error: ".mysql_error());

I used the same query with different variables for the posting of the topic, which works perfectly. Why the reply doe snot.. i dunno.. x.o

 

[bo17age]

The error:


The query:


I used the same query with different variables for the posting of the topic, which works perfectly. Why the reply doe snot.. i dunno.. x.o

ON is a Mysql's system function, you have to use `ON` in this case

..and double check your date format

 

[misson]

In addition:

• Your script might be vulnerable to SQL injection. Instead of the outdated mysql driver, use PDO and prepared statements. If you need a tutorial, try "Writing MySQL Scripts with PHP and PDO".
• Don't use die if you're outputting HTML.
• Don't output error messages from the DBMS (e.g. the result of mysql_error) to non-admin users. It discloses too much information.