db->query HELP :(

[eluser]theprodigy[/eluser]
Apart from what has already been said, you may want to consider back-ticking the column names (this is part of the "escaping" that carvingCode mentioned). By back-ticking (`) the column names, this will make sure that if any of your column names are mysql reserved words, it recognizes them as column names and doesn't try to render whatever command they happen to be a part of.

Using Kenshiro's updated syntax, change:

Code:

$query = 'INSERT INTO ci_images (imagetype, usage, usage_id, size_num, size, name, fullpath, comment) VALUES ( "'.$data[imagetype].'", "'.$data[usage].'", '.$data[usage_id].', '.$data[size_num].', "'.$data[size].'", "'.$data[name].'", "'.$data[fullpath].'", "'.$data[comment].'")';

to:

Code:

$query = 'INSERT INTO ci_images (`imagetype`, `usage`, `usage_id`, `size_num`, `size`, `name`, `fullpath`, `comment`) VALUES ( "'.$data[imagetype].'", "'.$data[usage].'", '.$data[usage_id].', '.$data[size_num].', "'.$data[size].'", "'.$data[name].'", "'.$data[fullpath].'", "'.$data[comment].'")';