[PHP] Mysql-Anweisung fehlerhaft...

// Daten erzeugen	
		$username = trim($_POST['username']);
		$name = trim($_POST['name']);
		$email = trim($_POST['email']);
		$art = trim($_POST['art']);
		$faecher = trim($_POST['faecher']);
		$schulzeit = trim($_POST['schulzeit']);
		$anschuleseit = trim($_POST['anschuleseit']);
		$abi = trim($_POST['abi']); 
		$homepage = trim($_POST['homepage']);
		$icq = trim($_POST['icq']);
		$msn = trim($_POST['msn']);
		$besleistungen = trim($_POST['besleistungen']);
		$datum = date("d.m.Y");
		$password = generate_password();
		$showperpage = 25;
		
		if ($_POST['hide_email'] == 'yes')
			$hide_mail = 1;
		else
			$hide_mail = 0;
			
			
		// Daten nun in die Datenbank eintragen
		
		$db->query("INSERT INTO user (user, password, email, name, abi, schulzeit, homepage, icq, joined, hide_email, msn, lehrer, faecher, art, schuleseit, showperpage)
					VALUES (
					
					 $username,
					 ".md5($password).",
					 '$email',
					 $name,
					 $abi,
					 '$schulzeit',
					 $homepage,
					 $icq,
					 $datum,
					 $hide_mail,
					 $msn,
					 1,
					 $faecher,
					 $art,
					 $anschuleseit,
					 25)
					 ");

-> Database Error: Invalid SQL: INSERT INTO user (user, password, email, name, abi, schulzeit, homepage, icq, joined, hide_email, msn, lehrer, faecher, art, schuleseit, showperpage)
					VALUES (
					
					 dirk-alive,
					 b814da6b4d445c64590dfceaada5db38,
					 'test@test2.de',
					 Testlehrer,
					 2005,
					 '2004 - 2006',
					 [url]http://www.vwar.de,[/url]
					 '',
					 24.06.2004,
					 0,
					 ,
					 1,
					 Mathematik, Englisch,
					 testrat,
					 2004,
					 25)
					 
-> MySQL Error: You have an error in your SQL syntax.  Check the manual that corresponds to your MySQL server version for the right syntax to use near '://www.vwar.de,
					 '',
					 24.06.2004,
					 0,
					 
-> MySQL Error Number: 1064
-> Date: 24.06.2004 @ 15:50
-> Script: /ehemaligenliste/admin/lehrer.php?action=add
-> Referer:

$db->query("INSERT INTO user (id, user, password, email, name, abi, schulzeit, homepage, icq, joined, hide_email, msn, lehrer, faecher, art, schuleseit, showperpage)
					VALUES (
					 '',
					 '$username',
					 '".md5($password)."',
					 '$email',
					 '$name',
					 '$abi',
					 '$schulzeit',
					 '$homepage',
					 '$icq',
					 '$datum',
					 '$hide_mail',
					 '$msn',
					 1,
					 '$faecher',
					 '$art',
					 '$anschuleseit',
					 25)
					 ");

".$var."

<?php
// Beispiel:
$username="Procyon, theEvil";
$password="123456";
$email="test@test.com";

// gekürzt:

$db->query
	(	'INSERT INTO user (user, password, email)
		 VALUES 
			(	$username,
				'.md5($password).',
				$email
			)'
	);
?>

INSERT INTO user (user, password, email)
		 VALUES 
			(	Procyon, theEvil,
				e10adc3949ba59abbe56e057f20f883e,
				[email]test@test.com[/email]
			)

mysql_query
	(	"INSERT INTO 
			`user` (`text`)
		VALUES
			('ich hab\\' hier ein Apostroph gemacht')"
	);

<?php
function mysqlsafetblcolname($name)
{
	global $db;
	settype($name,'string');
	$name=str_replace('`','',$name);
	return('`'.mysql_real_escape_string($name,$db).'`');
} // end function mysqlsafetblcolname

function mysqlsafestringvalue($value)
{
	global $db;
	settype($value,'string');
	return("'".mysql_real_escape_string($value,$db)."'");
} // end function mysqlsafestringvalue
?>

<?php
/*
**	MAGIC QUOTES
**
**	I don't like magic quotes, if they're on, remove them again
*/
/*
**	recursive_stripslashes
**
**	removes the slashes from strings & arrays recursively.
**	only works on strings & arrays, all other types are not changed.
*/
function recursive_stripslashes($with_slashes)
{
	// the type of $with_slashes decides what to do
	if(is_string($with_slashes))
		// just remove the slashes and we're finished
		return(stripslashes($with_slashes));
	elseif(is_array($with_slashes))
	{	// work on every element of the array recursively
		foreach($with_slashes as $index=>$value)
			$with_slashes[$index]=recursive_stripslashes($value);
		return($with_slashes); // return it ... even now the varname is wrong
	}
	else
		// don't know what to do, do nothing
		return($with_slashes);
} // end function recursive_stripslashes

/*
**	do this before the call of recursive_stripslashes, because the returned
**	value from recursive_stripslashes would probably be sent through addslashes
**	again if magic_quotes_runtime is 1 !!!
*/
set_magic_quotes_runtime(0);

if(get_magic_quotes_gpc())
	$GLOBALS=recursive_stripslashes($GLOBALS);
?>

<?php
  function sqlSafeString($param) {
    // Hier wird wg. der grossen Verbreitung auf MySQL eingegangen
    return (NULL === $param ? "NULL" : '"'.mysql_escape_string ($param).'"');
  }

  function sqlSafeInt($param) {
    return (NULL === $param ? "NULL" : intVal ($param));
  }
?>