MySQL query issue with Flex, php -

i'm trying pass mysql query variables flex mysql using php.

this query in flex. appears correct.

mysqlquery("insert poc_note_test (first_name,last_name) values ("+firstname+"," +lastname+")"); 

when query passed server via http processed php returns following error

you have error in sql syntax; check manual corresponds mysql server version right syntax use near 'test_value )' @ line 1 

from can see trying include final ")" part of value. life of me cannot see how stop happening.

here php being used process query errors out.

$sql = $_request['sql']; $result = mysql_query($sql); $err = mysql_error(); $cols_count = mysql_num_fields($result) or error_log('invalid query: ' .mysql_error()); 

any appreciated

this function passing query. maybe issue here?

public function mysqlquery(sql:string,fid:string):void {  var http:httpservice = new httpservice; var parm:object = new object; parm.sql = sql; parm.private_key = private_key; parm.fas_db = mysql_db;  http.url = mysql_url+"?irand="+math.random();  http.showbusycursor = true; http.request = sql; http.addeventlistener(resultevent.result, mysqlresult); http.addeventlistener(faultevent.fault, mysqlfault); http.method = "post";  sqltoken = http.send(parm); sqltoken.param = fid; 

}

change this

mysqlquery("insert poc_note_test (first_name,last_name) values ("+firstname+"," +lastname+")"); 

to

mysqlquery("insert poc_note_test (first_name,last_name) values ('"+firstname+"','" +lastname+"')"); 

put ' around values

for removing \

$result = mysql_query(stripslashes($sql));