MySQL Insert

[Earpy]

if (isset($_POST['note'])) {
$note = $_POST['note'];
$author = $_POST['by'];	
$sql = "INSERT INTO notes SET note='$note',
	by='$author'";

if (@mysql_query($sql))
{
echo 'News item has been added';
} else { 
echo 'Error adding the news item: ' . mysql_error() . ''; 
}
}
?>

 

 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'by='gjkgjfd'' at line 2

 

 

I really have no idea what the problem is. A form with a textarea and a text box submit to this page and it's the only code on the page, yet it's giving me this error. It's staring me right in the face but I just can't see it. Any help will be much appreciated.

[obfuscator]

Try:

 

$sql = "INSERT INTO notes (by, note) VALUES ('$by', '$note')";