INSERT在使用变量时不使用MySQL / PHP [duplicate]

Question

This question already has an answer here:

• When to use single quotes, double quotes, and backticks in MySQL 12 answers
• How can I prevent SQL injection in PHP? 28 answers
• SQL injection that gets around mysql_real_escape_string() 4 answers

The following command is not working.

Both $row['webaddress'] and $row['webhomepage'] contain values such as: http://example.com/web/whatever.php

Here is the code

$webaddress = $row['webaddress'];
$webhomepage = $row['webhomepage'];

$textquery = "INSERT INTO web_rotate (id, webaddress, webhomepage) VALUES ($id, $webaddress, $webhomepage)";
$result = $conn->query($textquery);

This does work when I do this: VALUES ($id, 'http://example.com/whatever.php', 'http://example2.com/whatever2.php')

And I am not getting any errors.

</div>