ช่วยแก้ปัญหาทีครับ You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax

<?
session_start();

include("connect_db.php");

  $Total = 0;
  $SumTotal = 0;

$cu_id=$_REQUEST['cusid'];
$or_add=$_REQUEST['txtAddress'];


$sql = "INSERT INTO order ";
	$sql = $sql."(order_date,cus_id,order_add) ";
	$sql = $sql."VALUES ('".date("Y-m-d")."',\"".$cu_id."\",\"".$or_add."\") ";

  $result = mysql_query($sql) or die(mysql_error() . "<br />" . $sql);
  $strOrderID = mysql_insert_id();

  for($i=0;$i<=(int)$_SESSION["intLine"];$i++)
  {
	  if($_SESSION["strProductID"][$i] != "")
	  {
			  $strSQL = "
				INSERT INTO order_detail (order_id,prd_id,order_amount)
				VALUES
				('".$strOrderID."','".$_SESSION["strProductID"][$i]."','".$_SESSION["strQty"][$i]."') ";
			  mysql_query($strSQL) or die(mysql_error());
	  }
  }

mysql_close();

session_destroy();

header("location:finish_order.php?order_id=".$strOrderID);
?>