插入语法错误

Question

I have been working on a simple php code which links a html form to a mySQL database. I have installed xampp and am running Apache and mySQL but I cannot seem to solve the problem. Error Alert

So I've tried several different things in order to fix this syntax error: Syntax Error Location

This has been a very big annoyance so if anyone could help me out it would be greatly appreciated. I also attacted my entire php code but it cut off the php ending. Entire Code

Thanks and hope to hear from you soon!

Answer 1

Replace your insert with following insert

$insert = $conn->prepare("INSERT INTO `general` (email, psw, firstname, lastname) VALUES (?, ?, ?, ?)");
$insert->bind_param("ssss", $email, $psw, $firstname, $lastname);

and then instead of

$conn->query($sql);

use

$insert->execute();

This way you will protect your database from SQL injection attack. Well at least in this case. This is called prepared statement and you should use them everywhere, where user created data may enter your Database query.