ERROR! You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'and spid1 = 0 and spid2 = 0 and hienthi=1 order by sapxep asc,id desc' at line 1 (code:1064)
select id,tieude,thumbfb from h_sanpham where cm=1 and spid= and spid1 = 0 and spid2 = 0 and hienthi=1 order by sapxep asc,id desc