sql insert into error

I have built a form and need to have the values collected from the form pushed into an Access table, but am getting a SQL syntax error on submission. Here's the code for insert:

<?php
$error_rep=0;
?>

<?php
//I created this if statement to check for values only in these fields.  The other fields on the form are not required
//echo '<br><table><tr><td><b>';
if ((!$address) || (!$city) || (!$state) || (!$zip) || (!$Gender) || (!$age) || (!$DOB) || (!$Citizen) || (!$ethnicity) || (!$race) || (!$srweight) || (!$srheightft) || (!$srheightin) || (!$program) || (!$heartattack) || (!$angina) || (!$irregheart) || (!$otherheart) || (!$stroke) || (!$fainting) || (!$hbp) || (!$chol) || (!$thyroid) || (!$cancer) || (!$kidney) || (!$liver) || (!$gout) || (!$diabetes) || (!$psych) || (!$drug) || (!$eating) || (!$other) || (!$surgery) || (!$xrays) || (!$ct) || (!$pet) || (!$fluroscopic) || (!$nms) || (!$wtlossgain) || (!$exercise) || (!$Medication) || (!$supplement) || (!$alcohol) || (!$alcoholwkend) || (!$cigarettes) || (!$pipe) || (!$cigars) || (!$dip))
{
  $error_rep=1;	
  Print "You forgot to fill in some of the fields. Please go back and check your data.";

} else {
  $error_rep=0;
}	
//echo '</td></tr></table></b>';
$Name1=isset($HTTP_POST_VARS['Name1']) ? $HTTP_POST_VARS['Name1'] : 'NA';
$Name2=isset($HTTP_POST_VARS['Name2'])?$HTTP_POST_VARS['Name2']:'NA';
$address=isset($HTTP_POST_VARS['address']) ? $HTTP_POST_VARS['address'] :'NA';
$city=isset($HTTP_POST_VARS['city']) ? $HTTP_POST_VARS['city'] :'NA';
$state=isset($HTTP_POST_VARS['state']) ? $HTTP_POST_VARS['state'] :'NA';
$zip=isset($HTTP_POST_VARS['zip']) ? $HTTP_POST_VARS['zip'] : 0;
$dorm=isset($HTTP_POST_VARS['dorm']) ? $HTTP_POST_VARS['dorm'] :'NA';
$room=isset($HTTP_POST_VARS['room']) ? $HTTP_POST_VARS['room'] :'NA';
$homephone=isset($HTTP_POST_VARS['homephone']) ? $HTTP_POST_VARS['homephone'] :'(000) 000-0000';
$schoolphone=isset($HTTP_POST_VARS['schoolphone']) ? $HTTP_POST_VARS['schoolphone'] :'(000) 000-0000';
$workphone=isset($HTTP_POST_VARS['workphone']) ? $HTTP_POST_VARS['workphone'] :'(000) 000-0000';
$cellphone=isset($HTTP_POST_VARS['cellphone']) ? $HTTP_POST_VARS['cellphone'] :'(000) 000-0000';
$email1=isset($HTTP_POST_VARS['email1']) ? $HTTP_POST_VARS['email1'] :'NA';
$email2=isset($HTTP_POST_VARS['email2']) ? $HTTP_POST_VARS['email2'] :'NA';
$Gender=isset($HTTP_POST_VARS['Gender']) ? $HTTP_POST_VARS['Gender'] :'NA';
$age=isset($HTTP_POST_VARS['age']) ? $HTTP_POST_VARS['age'] : 0;
$DOB=isset($HTTP_POST_VARS['DOB']) ? $HTTP_POST_VARS['DOB'] :'00/00/0000';
$Citizen=isset($HTTP_POST_VARS['Citizen']) ? $HTTP_POST_VARS['Citizen']:'NA';
$visa=isset($HTTP_POST_VARS['visa']) ? $HTTP_POST_VARS['visa'] : ' ';
$residence=isset($HTTP_POST_VARS['residence']) ? $HTTP_POST_VARS['residence'] : ' ';
$alien=isset($HTTP_POST_VARS['alien']) ? $HTTP_POST_VARS['alien'] :'NA';
$ethnicity=isset($HTTP_POST_VARS['ethnicity']) ? $HTTP_POST_VARS['ethnicity'] :'NA';
$race=isset($HTTP_POST_VARS['race']) ? $HTTP_POST_VARS['race'] :'NA';
$srweight=isset($HTTP_POST_VARS['srweight']) ? $HTTP_POST_VARS['srweight'] : 0;
$srheightft=isset($HTTP_POST_VARS['srheightft']) ? $HTTP_POST_VARS['srheightft'] : 0;
$srheightin=isset($HTTP_POST_VARS['srheightin']) ? $HTTP_POST_VARS['srheightin'] : 0;
$program=isset($HTTP_POST_VARS['program']) ? $HTTP_POST_VARS['program'] :'NA';
$other=isset($HTTP_POST_VARS['other']) ? $HTTP_POST_VARS['other'] : ' ';
$heartattack=isset($HTTP_POST_VARS['heartattack']) ? $HTTP_POST_VARS['heartattack'] :'NA';
$heartattackdod=isset($HTTP_POST_VARS['heartattackdod']) ? $HTTP_POST_VARS['heartattackdod'] :'00/00/0000';
$heartattackdesc=isset($HTTP_POST_VARS['heartattackdesc']) ? $HTTP_POST_VARS['heartattackdesc'] :'NA';
$angina=isset($HTTP_POST_VARS['ggt']) ? $HTTP_POST_VARS['ggt'] :'NA';
$anginadod=isset($HTTP_POST_VARS['anginadod']) ? $HTTP_POST_VARS['anginadod'] :'00/00/0000';
$anginadesc=isset($HTTP_POST_VARS['anginadesc']) ? $HTTP_POST_VARS['anginadesc'] :'NA';
$irregheart=isset($HTTP_POST_VARS['irregheart']) ? $HTTP_POST_VARS['irregheart'] :'NA';
$irregheartdod=isset($HTTP_POST_VARS['irregheartdod']) ? $HTTP_POST_VARS['irregheartdod'] :'00/00/0000';
$irregheartdesc=isset($HTTP_POST_VARS['irregheartdesc']) ? $HTTP_POST_VARS['irregheartdesc'] :'NA';
$otherheart=isset($HTTP_POST_VARS['otherheart']) ? $HTTP_POST_VARS['otherheart'] :'NA';
$otherheartdod=isset($HTTP_POST_VARS['otherheartdod']) ? $HTTP_POST_VARS['otherheartdod'] :'00/00/0000';
$otherheartdesc=isset($HTTP_POST_VARS['otherheartdesc']) ? $HTTP_POST_VARS['otherheartdesc'] :'NA';
$stroke=isset($HTTP_POST_VARS['stroke']) ? $HTTP_POST_VARS['stroke'] :'NA';
$strokedod=isset($HTTP_POST_VARS['strokedod']) ? $HTTP_POST_VARS['strokedod'] :'00/00/0000';
$strokedesc=isset($HTTP_POST_VARS['strokedesc']) ? $HTTP_POST_VARS['strokedesc'] :'NA';
$fainting=isset($HTTP_POST_VARS['fainting']) ? $HTTP_POST_VARS['fainting'] :'NA';
$faintingdod=isset($HTTP_POST_VARS['faintingdod']) ? $HTTP_POST_VARS['faintingdod'] :'00/00/0000';
$faintingdesc=isset($HTTP_POST_VARS['faintingdesc']) ? $HTTP_POST_VARS['faintingdesc'] :'NA';
$hbp=isset($HTTP_POST_VARS['hbp']) ? $HTTP_POST_VARS['hbp'] :'NA';
$hbpdod=isset($HTTP_POST_VARS['hbpdod']) ? $HTTP_POST_VARS['hbpdod'] :'00/00/0000';
$hbpdesc=isset($HTTP_POST_VARS['hbpdesc']) ? $HTTP_POST_VARS['hbpdesc'] :'NA';
$chol=isset($HTTP_POST_VARS['chol']) ? $HTTP_POST_VARS['chol'] :'NA';
$choldod=isset($HTTP_POST_VARS['choldod']) ? $HTTP_POST_VARS['choldod'] :'00/00/0000';
$choldesc=isset($HTTP_POST_VARS['choldesc']) ? $HTTP_POST_VARS['choldesc'] :'NA';
$thyroid=isset($HTTP_POST_VARS['thyroid']) ? $HTTP_POST_VARS['thyroid'] :'NA';
$thyroiddod=isset($HTTP_POST_VARS['thyroiddod']) ? $HTTP_POST_VARS['thyroiddod'] :'00/00/0000';
$thyroiddesc=isset($HTTP_POST_VARS['thyroiddesc']) ? $HTTP_POST_VARS['thyroiddesc'] :'NA';
$cancer=isset($HTTP_POST_VARS['cancer']) ? $HTTP_POST_VARS['cancer'] :'NA';
$cancerdod=isset($HTTP_POST_VARS['cancerdod']) ? $HTTP_POST_VARS['cancerdod'] :'00/00/0000';
$cancerdesc=isset($HTTP_POST_VARS['cancerdesc']) ? $HTTP_POST_VARS['cancerdesc'] :'NA';
$kidney=isset($HTTP_POST_VARS['kidney']) ? $HTTP_POST_VARS['kidney'] :'NA';
$kidneydod=isset($HTTP_POST_VARS['kidneydod']) ? $HTTP_POST_VARS['kidneydod'] :'00/00/0000';
$kidneydesc=isset($HTTP_POST_VARS['kidneydesc']) ? $HTTP_POST_VARS['kidneydesc'] :'NA';
$liver=isset($HTTP_POST_VARS['liver']) ? $HTTP_POST_VARS['liver'] :'NA';
$liverdod=isset($HTTP_POST_VARS['liverdod']) ? $HTTP_POST_VARS['liverdod'] :'00/00/0000';
$liverdesc=isset($HTTP_POST_VARS['liverdesc']) ? $HTTP_POST_VARS['liverdesc'] :'NA';
$gout=isset($HTTP_POST_VARS['gout']) ? $HTTP_POST_VARS['gout'] :'NA';
$goutdod=isset($HTTP_POST_VARS['goutdod']) ? $HTTP_POST_VARS['goutdod'] :'00/00/0000';
$goutdesc=isset($HTTP_POST_VARS['goutdesc']) ? $HTTP_POST_VARS['goutdesc'] :'NA';
$diabetes=isset($HTTP_POST_VARS['diabetes']) ? $HTTP_POST_VARS['diabetes'] :'NA';
$diabetesdod=isset($HTTP_POST_VARS['diabetesdod']) ? $HTTP_POST_VARS['diabetesdod'] :'00/00/0000';
$diabetesdesc=isset($HTTP_POST_VARS['diabetesdesc']) ? $HTTP_POST_VARS['diabetesdesc'] :'NA';
$psych=isset($HTTP_POST_VARS['psych']) ? $HTTP_POST_VARS['psych'] :'NA';
$psychdod=isset($HTTP_POST_VARS['psychdod']) ? $HTTP_POST_VARS['psychdod'] :'00/00/0000';
$psychdesc=isset($HTTP_POST_VARS['psychdesc']) ? $HTTP_POST_VARS['psychdesc'] :'NA';
$drug=isset($HTTP_POST_VARS['drug']) ? $HTTP_POST_VARS['drug'] :'NA';
$drugdod=isset($HTTP_POST_VARS['drugdod']) ? $HTTP_POST_VARS['drugdod'] :'00/00/0000';
$drugdesc=isset($HTTP_POST_VARS['drugdesc']) ? $HTTP_POST_VARS['drugdesc'] :'NA';
$eating=isset($HTTP_POST_VARS['eating']) ? $HTTP_POST_VARS['eating'] :'NA';
$eatingdod=isset($HTTP_POST_VARS['eatingdod']) ? $HTTP_POST_VARS['eatingdod'] :'00/00/0000';
$eatingdesc=isset($HTTP_POST_VARS['eatingdesc']) ? $HTTP_POST_VARS['eatingdesc'] :'NA';
$other=isset($HTTP_POST_VARS['other']) ? $HTTP_POST_VARS['other'] :'NA';
$otherdod=isset($HTTP_POST_VARS['otherdod']) ? $HTTP_POST_VARS['otherdod'] :'00/00/0000';
$otherdesc=isset($HTTP_POST_VARS['otherdesc']) ? $HTTP_POST_VARS['otherdesc'] :'NA';
$surgery=isset($HTTP_POST_VARS['surgery']) ? $HTTP_POST_VARS['surgery'] :'NA';
$surgerydesc=isset($HTTP_POST_VARS['surgerydesc']) ? $HTTP_POST_VARS['surgerydesc'] :'NA';
$xrays=isset($HTTP_POST_VARS['xrays']) ? $HTTP_POST_VARS['xrays'] :'NA';
$xraynum=isset($HTTP_POST_VARS['xraynum']) ? $HTTP_POST_VARS['xraynum'] : 0;
$ct=isset($HTTP_POST_VARS['ct']) ? $HTTP_POST_VARS['ct'] :'NA';
$pet=isset($HTTP_POST_VARS['pet']) ? $HTTP_POST_VARS['pet'] :'NA';
$fluroscopic=isset($HTTP_POST_VARS['fluroscopic']) ? $HTTP_POST_VARS['fluroscopic'] :'NA';
$nms=isset($HTTP_POST_VARS['nms']) ? $HTTP_POST_VARS['nms'] :'NA';
$wtlossgain=isset($HTTP_POST_VARS['wtlossgain']) ? $HTTP_POST_VARS['wtlossgain'] :'NA';
$wtlbs=isset($HTTP_POST_VARS['wtlbs']) ? $HTTP_POST_VARS['wtlbs'] : 0;
$gainloss=isset($HTTP_POST_VARS['gainloss']) ? $HTTP_POST_VARS['gainloss'] :'NA';
$exercise=isset($HTTP_POST_VARS['exercise']) ? $HTTP_POST_VARS['exercise'] :'NA';
$activity1=isset($HTTP_POST_VARS['activity1']) ? $HTTP_POST_VARS['activity1'] :'NA';
$act1dur=isset($HTTP_POST_VARS['act1dur']) ? $HTTP_POST_VARS['act1dur'] : 0;
$act1days=isset($HTTP_POST_VARS['act1days']) ? $HTTP_POST_VARS['act1days'] : 0;
$activity2=isset($HTTP_POST_VARS['activity2']) ? $HTTP_POST_VARS['activity2'] :'NA';
$act2dur=isset($HTTP_POST_VARS['act2dur']) ? $HTTP_POST_VARS['act2dur'] : 0;
$act2days=isset($HTTP_POST_VARS['act2days']) ? $HTTP_POST_VARS['act2days'] : 0;
$activity3=isset($HTTP_POST_VARS['activity3']) ? $HTTP_POST_VARS['activity3'] :'NA';
$act3dur=isset($HTTP_POST_VARS['act3dur']) ? $HTTP_POST_VARS['act3dur'] : 0;
$act3days=isset($HTTP_POST_VARS['act3days']) ? $HTTP_POST_VARS['act3days'] : 0;
$activity4=isset($HTTP_POST_VARS['activity4']) ? $HTTP_POST_VARS['activity4'] :'NA';
$act4dur=isset($HTTP_POST_VARS['act4dur']) ? $HTTP_POST_VARS['act4dur'] : 0;
$act4days=isset($HTTP_POST_VARS['act4days']) ? $HTTP_POST_VARS['act4days'] : 0;
$Medication=isset($HTTP_POST_VARS['Medication']) ? $HTTP_POST_VARS['Medication'] :'NA';
$Med1=isset($HTTP_POST_VARS['Med1']) ? $HTTP_POST_VARS['Med1'] :'NA';
$Med1reason=isset($HTTP_POST_VARS['Med1reason']) ? $HTTP_POST_VARS['Med1reason'] :'NA';
$Med2=isset($HTTP_POST_VARS['Med2']) ? $HTTP_POST_VARS['Med2'] :'NA';
$Med2reason=isset($HTTP_POST_VARS['Med2reason']) ? $HTTP_POST_VARS['Med2reason'] :'NA';
$Med3=isset($HTTP_POST_VARS['Med3']) ? $HTTP_POST_VARS['Med3'] :'NA';
$Med3reason=isset($HTTP_POST_VARS['Med3reason']) ? $HTTP_POST_VARS['Med3reason'] :'NA';
$supplement=isset($HTTP_POST_VARS['supplement']) ? $HTTP_POST_VARS['supplement'] :'NA';
$supplement1=isset($HTTP_POST_VARS['supplement1']) ? $HTTP_POST_VARS['supplement1'] :'NA';
$supplement1reason=isset($HTTP_POST_VARS['supplement1reason']) ? $HTTP_POST_VARS['supplement1reason'] :'NA';
$supplement2=isset($HTTP_POST_VARS['supplement2']) ? $HTTP_POST_VARS['supplement2'] :'NA';
$supplement2reason=isset($HTTP_POST_VARS['supplement2reason']) ? $HTTP_POST_VARS['supplement2reason'] :'NA';
$supplement3=isset($HTTP_POST_VARS['supplement3']) ? $HTTP_POST_VARS['supplement3'] :'NA';
$supplement3reason=isset($HTTP_POST_VARS['supplement3reason']) ? $HTTP_POST_VARS['supplement3reason'] :'NA';
$alcohol=isset($HTTP_POST_VARS['alcohol']) ? $HTTP_POST_VARS['alcohol'] :'NA';
$drinkswkday=isset($HTTP_POST_VARS['drinkswkday']) ? $HTTP_POST_VARS['drinkswkday'] : 0;
$alcoholwkend=isset($HTTP_POST_VARS['alcoholwkend']) ? $HTTP_POST_VARS['alcoholwkend'] :'NA';
$drinkswkend=isset($HTTP_POST_VARS['drinkswkend']) ? $HTTP_POST_VARS['drinkswkend'] : 0;
$cigarettes=isset($HTTP_POST_VARS['cigarettes']) ? $HTTP_POST_VARS['cigarettes'] :'NA';
$cigarettesdesc=isset($HTTP_POST_VARS['cigarettesdesc']) ? $HTTP_POST_VARS['cigarettesdesc'] :'NA';
$pipe=isset($HTTP_POST_VARS['pipe']) ? $HTTP_POST_VARS['pipe'] :'NA';
$pipedesc=isset($HTTP_POST_VARS['pipedesc']) ? $HTTP_POST_VARS['pipedesc'] :'NA';
$cigars=isset($HTTP_POST_VARS['cigars']) ? $HTTP_POST_VARS['cigars'] :'NA';
$cigarsdesc=isset($HTTP_POST_VARS['cigarsdesc']) ? $HTTP_POST_VARS['cigarsdesc'] :'NA';
$dip=isset($HTTP_POST_VARS['dip']) ? $HTTP_POST_VARS['dip'] :'NA';
$dipdesc=isset($HTTP_POST_VARS['dipdesc']) ? $HTTP_POST_VARS['dipdesc'] :'NA';
$pregnant=isset($HTTP_POST_VARS['pregnant']) ? $HTTP_POST_VARS['pregnant'] :'NA';
$werepregnant=isset($HTTP_POST_VARS['werepregnant']) ? $HTTP_POST_VARS['werepregnant'] :'NA';
$planpregnant=isset($HTTP_POST_VARS['planpregnant']) ? $HTTP_POST_VARS['planpregnant'] :'NA';
$hysterectomy=isset($HTTP_POST_VARS['hysterectomy']) ? $HTTP_POST_VARS['hysterectomy'] :'NA';
$period=isset($HTTP_POST_VARS['period']) ? $HTTP_POST_VARS['period'] :'NA';
$noperiod=isset($HTTP_POST_VARS['noperiod']) ? $HTTP_POST_VARS['noperiod'] :'NA';
$lastperiod=isset($HTTP_POST_VARS['lastperiod']) ? $HTTP_POST_VARS['lastperiod'] :'00/00/0000';

$conn = odbc_connect ('LTE_Master', '', '');
 $get_stat = "SELECT patientid from [Official_Name_and_Status] where FNAME = '$Name1' and LNAME = '$Name2';";
  $id= odbc_exec($conn,$get_stat);
  
  $case_number = odbc_result($id, 1);
  $case_number = $case_number ? $case_number : 0; 
  $case_number=(integer)$case_number;

$insert_statement = "
	insert into 
		[Health_History]
		values	 ($case_number,'$Name1','$Name2','$address','$city','$state','$zip','$dorm','$room','$homephone','$schoolphone','$workphone','$cellphone','$email1','$email2',$Gender,$age,$DOB,$Citizen,'$visa','$residence',$alien,$ethnicity,$race,$srweight,$srheightft,$srheightin,$program,'$other',$heartattack,$heartattackdod,'$heartattackdesc',$angina,$anginadod,'$anginadesc',$irregheart,$irregheartdod,'$irregheartdesc',$otherheart,$otherheartdod,'$otherheartdesc',$stroke,$strokedod,'$strokedesc',$fainting,$faintingdod,'$faintingdesc',$hbp,$hbpdod,'$hbpdesc',$chol,$choldod,'$choldesc',$thyroid,$thyroiddod,'$thyroiddesc',$cancer,$cancerdod,'$cancerdesc',$kidney,$kidneydod,'$kidneydesc',$liver,$liverdod,'$liverdesc',$gout,$goutdod,'$goutdesc',$diabetes,$diabetesdod,'$diabetesdesc',$psych,$psychdod,'$psychdesc',$drug,$drugdod,'$drugdesc',$eating,$eatingdod,'$eatingdesc',$other,$otherdod,'$otherdesc',$surgery,'$surgerydesc',$xrays,$xraynum,$ct,$pet,$fluroscopic,$nms,$wtlossgain,$wtlbs,$gainloss,$exercise,'$activity1',$act1dur,$act1days,'$activity2',$act2dur,$act2days,'$activity3',$act3dur,$act3days,'$activity4',$act4dur,$act4days,$Medication,'$Med1','$Med1reason','$Med2','$Med2reason','$Med3','$Med3reason',$supplement,'$supplement1','$supplement1reason','$supplement2','$supplement2reason','$supplement3','$supplement3reason',$alcohol,$drinkswkday,$alcoholwkend,$drinkswkend,$cigarettes,'$cigarettesdesc',$pipe,'$pipedesc',$cigars,'$cigarsdesc',$dip,'$dipdesc',$pregnant,$werepregnant,$planpregnant,$hysterectomy,$period,'$noperiod',$lastperiod)";
	
$result= odbc_exec($conn,$insert_statement);
if($result)
{ //this is the line giving the SQL Error
  
?>
<table width="698" border="0">
  <tr>
    <td width="688" height="51" bordercolor="#FFFFFF"><h4><font color="#0000FF" size="+4"><em><font color="#006699" size="+3">Your</font> <font color="#006699" size="+3">data has been submitted successfully! </font></em></font></h4>
      <p><span class="style18">Click <a href="javascript:history.back()">here</a> to go back</span></p></td>
  </tr>
</table>
<h3 align="justify"><font color="#0000FF" size="+4"> </font>

<?php
}
include ("footer.php");
?>
</h3>

PHP:

When I submit I get the following error:

Warning: SQL error: [Microsoft][ODBC Microsoft Access Driver] Syntax error in INSERT INTO statement., SQL state 37000 in SQLExecDirect in c:\program files\apache group\apache\htdocs\lte\hh_add2.php on line 254

Code (markup):

I just need to have the variables pushed into the Health_History table in an Access database, as referenced by the odbc_connect statement. Is there a simpler way to do this?

 

Hahahahah....split'em up man and try each part...I doubt everyone will try to even understand that code. Nice one...hahaha

 

why don you use mysql ?

 

you know what I normally do, regardless of data type i add single quotes on each field '', may it be a numeric or a string value. You don't have any data-type validation on your code so you should be aware that. you may have somewhere, a javascript or something but it's best to add some server-side validation.

try adding single quotes on your insert statements.

your table is too big. can you break it down? it's hard to debug.