You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'and type='mausac' and hienthi=1 order by stt asc' at line 1syntax error: select tenkhongdau,ten_vi,photo,id,mamau from table_thuoctinh where id_product =  and type='mausac' and hienthi=1 order by stt asc