Cannot update database

[nadiam]

I am trying to update data but i get this error.

Uncaught exception 'PDOException' with message 'SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ' username = 'test1', email = '[e-mail]', phone = '012365478'' at line 1' in page.php:16

php:

<?php
    $thename = $_POST['name'];
    $theusername = $_POST['username'];
    $emailaddress = $_POST['email'];
    $phonenumber = $_POST['phone'];
    $status = "Decline";

    require "connection.php";

    $decline = $dbh->prepare("UPDATE users SET status = ? WHERE name = ?, username = ?, email = ?, phone = ?");
    $decline->bindParam(1, $status, PDO::PARAM_STR);
    $decline->bindParam(2, $thename, PDO::PARAM_STR);
    $decline->bindParam(3, $theusername, PDO::PARAM_STR);
    $decline->bindParam(4, $emailaddress, PDO::PARAM_STR);
    $decline->bindParam(5, $phonenumber, PDO::PARAM_STR);
    $decline->execute();    
?>

is it because its a string? i've come to realize when it comes to strings its not so straighforward.

[pritaeas]

Status and name are in the reserved word list, so should be in backticks.

https://dev.mysql.com/doc/refman/5.5/en/keywords.html

[Gideon_1]

Yes I agree with pritaeas, using mysql keywords as raw text renders your sql statement invalid. For my personal preference I usually like using column names nested in back ticks. Try this.

$decline = $dbh->prepare("UPDATE users SET `status` = ? WHERE `name` = ?, `username` = ?, `email` = ?, `phone` = ?");

[nadiam]

thank you. i added the backticks but im still getting the same error except now there are backticks on username, email and phone. I am actually using $.ajax to pass the data would that factor in the error?

X-Requested-With:XMLHttpRequest
Form Data
view source
view URL encoded
name:Test Two
username:test2
email:[e-mail]
phone:[phone]

just incase:

$("#declineRequest").on("click", function(){

    var full = $("#name").val();
    var username = $("#user").val();
    var emailaddress = $("#emailaddress").val();
    var phonenumber = $("#number").val();

    $.ajax({
        type: "POST",
        url: "declineRequest.php",
        data: "name="+full+"&username="+username+"&email="+emailaddress+"&phone="+phonenumber,
        success:  function(data){
            alert("Request Declined!");
         }
     });
});

[pixelsoul]

I am actually using $.ajax to pass the data would that factor in the error?

Nope, it's a SQL error you're getting.
You have to separate multiple WHERE conditions with the AND operator.

UPDATE users SET `status` = ? WHERE `name` = ? AND `username` = ? AND `email` = ? AND `phone` = ?

[nadiam]

thank you!