Your immediate problem is that long
is a reserved word.
You need to wrap it in backticks, eg
INSERT INTO ... pribank, `long`, avbal, ...
See http://dev.mysql.com/doc/refman/5.0/en/identifiers.html
This says nothing for the security of your application. I strongly suggest you read up on PDO, PDO::prepare()
and PDOStatement::bindParam()
1
solved PHP inserting data into database results in an error [closed]