I am trying to insert a article title and article.

I will show the error then the code.

''''''''''''''''''
You have an error in your SQL syntax; check the manual that
corresponds to your MySQL server version for the right syntax to use
near 'title here)' at line 1
''''''''''''''''''

However line 1 is comments, but as we know the debugging is not
specific with php.

Without the insert code, I can process the page.

handling page
'''''''''''''''''
<?php
/*
* FCKeditor - The text editor for Internet - http://www.fckeditor.net
* Copyright (C) 2003-2007 Frederico Caldeira Knabben
*
* == BEGIN LICENSE ==
*
* Licensed under the terms of any of the following licenses at your
* choice:
*
* - GNU General Public License Version 2 or later (the "GPL")
* http://www.gnu.org/licenses/gpl.html
*
* - GNU Lesser General Public License Version 2.1 or later
(the "LGPL")
* http://www.gnu.org/licenses/lgpl.html
*
* - Mozilla Public License Version 1.1 or later (the "MPL")
* http://www.mozilla.org/MPL/MPL-1.1.html
*
* == END LICENSE ==
*
* This page lists the data posted by a form.
*/
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<title>Articles - Posted Data</title>
<meta http-equiv="Content-Type" content="text/html;
charset=utf-8">
<meta name="robots" content="noindex, nofollow">
<link href="../sample.css" rel="stylesheet"
type="text/css" />
</head>
<body>
<h1>Articles - Posted Data</h1>
This page lists all data posted by the form.
<hr>
<table width="100%" border="1" cellspacing="0"
bordercolor="#999999">
<tr style="FONT-WEIGHT: bold; COLOR: #dddddd;
BACKGROUND-COLOR: #999999">
<td nowrap>Title&nbsp;&nbsp;</td>
<td>Value</td>
</tr>
<?php

if ( isset( $_POST ) )
$postArray = &$_POST ; // 4.1.0 or later,
use $_POST
else
$postArray = &$HTTP_POST_VARS ; // prior to 4.1.0, use
HTTP_POST_VARS

foreach ( $postArray as $sForm => $value )
{
if ( get_magic_quotes_gpc() )
$postedValue = htmlspecialchars( stripslashes(
$value ) ) ;
else
$postedValue = htmlspecialchars( $value ) ;

//connect to server and select database
$mysqli = mysqli_connect("host","username","pass","my_db");

// my note added now, this connection works.
// I think the error is with the insert

//create and issue the query
$add_post_sql = "INSERT INTO articles (title, article) VALUES
($sForm,$postedValue)";

$add_post_res = mysqli_query($mysqli, $add_post_sql)
or die(mysqli_error($mysqli));

mysqli_close($mysqli);

?>
<tr>
<td valign="top" nowrap><b><?=$sForm?
></b></td>
<td width="100%" style="white-
space:pre"><?=$postedValue?></td>
</tr>
<?php
}
?>
</table>
</body>
</html>


Reply via email to