PHP / mysql INSERT

Question

I want to insert some values into a mysql database and thought it can't be that hard. However I was wrong, maybe i am overlooking something simple.

This is my code:

$db = mysqli_connect("localhost", "*****", "*********", "usr_web633_3");
if(!$db)
{
  exit("Error: ".mysqli_connect_error());
}

$sql = "INSERT INTO anmeldungen ('ID', 'vorname', 'name', 'gender', 'str', 'hausnummer', 'telefon', 'gemeinde', 'vegetarier'')
VALUES ('id', 'vorname', 'name', 'gender', 'str', 'hausnummer', 'telefon', 'gemeinde', 'vegetarier')";

$sqlinsert = mysqli_query($db, $sql); 

if($sqlinsert == true) { 
    echo "works!"; 
} 
else { 
    echo "doesn't work:(";
}

It doesn't work like it should.. the values are just placeholders.

Hope you can help!

Answer 1

Escape column and table names with backticks.

INSERT INTO `anmeldungen` (`ID`, vorname, name, gender, str, hausnummer, telefon, gemeinde, vegetarier)
VALUES (1, 'vorname', 'name', 'gender', 'str', 'hausnummer', 'telefon', 'gemeinde', 'vegetarier')

And you had a quote too much at the last column name. Use a single backtick instead. But actually you only need to escape reserved words in MySQL

And watch out for your column data types. You can't insert a string into a number column. So id can probably only be a number.

And if your id is an auto-increment value then you should not provide a value at all. Use null or leave the column from your insert statement completely.

INSERT INTO `anmeldungen` (`ID`, vorname, ...
VALUES (null, 'vorname', ...