PDO Query Syntax Error

Why This Happens

PDO throws this exception when the database server rejects the SQL query due to a syntax error. This can be caused by typos in SQL keywords, using reserved words as column names without backticks, missing commas, or string concatenation errors when building queries dynamically.

The Problem

$stmt = $pdo->query("SELECT * FROM users WHERE name = $name"); // SQL injection risk and syntax error

The Fix

$stmt = $pdo->prepare('SELECT * FROM users WHERE name = :name');
$stmt->execute(['name' => $name]);

Step-by-Step Fix

1. 1

   Read the error message

   The SQL error message usually points to where the syntax breaks. Look at the query near the indicated position.

2. 2

   Use prepared statements

   Never concatenate variables into SQL strings. Use PDO prepared statements with named or positional placeholders.

3. 3

   Test the query directly

   Copy the SQL query and run it directly in a database client to isolate whether the issue is in SQL syntax or PHP code.