You have an error in your SQL syntax;

dhillon555 · June 5th, 2009, 12:49 AM

I am loosing sleep over the following error can anybody help me

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'tom\'' at line 1

Code:


$username = mysql_escape_string($_SESSION['myusername']); 

$query = "SELECT user_info.username, user_info.password, user_info.UserID, user_info.EmailAddress, user_info.Address, user_info.Postcode, user_info.FirstName, user_info.LastName FROM user_info WHERE user_info.username = '$username'"; 

$results = mysql_query(mysql_escape_string($query))
    or die(mysql_error());
    
while ($row = mysql_fetch_array($results)) {
    extract($row);
    
    echo $username;
    echo $password;
    echo $UserID;
    echo $EmailAddress;
    echo $Address;
    echo $Postcode;
    echo $FirstName;
    echo $LastName;
    
    
    
    
}
    



    
?>

mallsop · June 5th, 2009, 09:56 AM

Change this:

$results = mysql_query(mysql_escape_string($query))
to this:

$results = mysql_query($query)
And it should work.

Then read this: http://us.php.net/mysql_escape_string

p.s. Looks like you are using an old version of php? (Your query should have a db resource handle.)