Invalid query: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '732-732-1=0 0 0 1 --'' at line 3 Whole query: select count(*) as cnt from complaint where ip='-1' OR 2 732-732-1=0 0 0 1 --'