SQL problem

[galdikas]

mysql_query("INSERT INTO cxfer (from,to,amount,reason) VALUES ('$userid','$toid','$amount','$reason')") or die (mysql_error());

Anyone can tell what is wrong with this statement???

I get this error:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'from,to,amount,reason) VALUES ('1','1036','1000','1000')' at line 1

I really dont understand whats wrong

[Paul Evans]

('from','to','amount','reason')

[Djkanna]

mysql_query('INSERT INTO `cxfer` (`from`, `to`,`amount`, `reason`) VALUES ($userid, $toid, $amount, "'.mysql_real_escape_string($reason).'")') or die(mysql_error());