Virgules refusé par ma base de donné

<? include('header.php'); ?>
<center><font color="#049ad1"><b><br>
<?
if(empty($_SESSION['login'])) {
echo"Vous devez etre connecte pour acceder a cette page.<br>
<a href='inscription.php'><b><u>Inscrivez-vous</u></b></a> des maintenant ou <au>connectez-vous.";
     }
else {






$action = $_REQUEST['action'];
$textdedicace = $_REQUEST['textdedicace'];




if ($action == "dedicace") {

 if ( empty($textdedicace) )
 {
 echo"<font color='red' size='4'><b>Tous les champs sont obligatoires !</b></font><br><br>";
 }
 else {






$Jour = date("d/"); 
$Mois = date("n/");
switch ($Mois) {
case 1: 
$Mois = "01";
break; 
case 2:
$Mois = "02";
break;
case 3:
$Mois = "03";
break;
case 4:
$Mois = "04";
break;
case 5:
$Mois = "05";
break;
case 6:
$Mois = "06";
break;
case 7:
$Mois = "07";
break;
case 8:
$Mois = "08";
break;
case 9:
$Mois = "09";
break;
case 10:
$Mois = "10";
break;
case 11:
$Mois = "11";
break;
case 12:
$Mois = "12";
break;
} 
$Annee= date("/Y");


$quand = $Jour.$Mois.$Annee; // on met bout ? bout


  $search_ded = mysql_query("SELECT * FROM dedicaces WHERE pseudo = '$login' AND date = '$quand' ");
  $nb_ded     = mysql_num_rows($search_ded);
if($nb_ded > 2) { 


if($vip > 0) {


 $sql3 = "INSERT INTO dedicaces (id, pseudo, textdedicace, etat, date) VALUES ('','$login','$textdedicace','0','$quand')";
 $insert = mysql_query ($sql3);
 echo"Votre dedicace a bien ete enregistree.<br><br><br>";
 echo"<META HTTP-EQUIV='refresh' CONTENT='2; URL=dedicaces.php'>";


} 

else {

 echo"Vous etes limite a trois dedicaces par jour.<br><br><br>";
 echo"<META HTTP-EQUIV='refresh' CONTENT='2; URL=dedicaces.php'>";

}



}
else {

 $sql4 = "INSERT INTO dedicaces (id, pseudo, textdedicace, etat, date) VALUES ('','$login','$textdedicace','0','$quand')";
 $insert = mysql_query ($sql4);
 echo"Votre dedicace a bien ete enregistree.<br><br><br>";
 echo"<META HTTP-EQUIV='refresh' CONTENT='2; URL=dedicaces.php'>";


}
}



}







$search = mysql_query("SELECT * FROM dedicaces WHERE pseudo='$login' ");
$nb     = mysql_num_rows($search);

 if($nb == "0" ) {
  echo"Vous avez soumis aucune dedicace.";
 }
 else {

  $search2 = mysql_query("SELECT * FROM dedicaces WHERE pseudo='$login' AND etat='0' ");
  $nb2     = mysql_num_rows($search2);
  $search3 = mysql_query("SELECT * FROM dedicaces WHERE pseudo='$login' AND etat='1' ");
  $nb3     = mysql_num_rows($search3);
  echo"Vous avez $nb2 dedicaces en attente.<br>";
  echo"Vous avez $nb3 dedicaces diffuses.<br>";
 }

echo"
  <form name='new' action='dedicaces.php' method='post' enctype='multipart/form-data'>
  Votre dedicace : votre text<br>  <input type='text' name='textdedicace' size='40'><br>
  <input type='hidden' name='action' value='dedicace'>
  <input type='submit' class='button' value='Enregistrer'>
  </form>";









}
?>

 $sql4 = "INSERT INTO dedicaces (id, pseudo, textdedicace, etat, date) VALUES ('','$login','$textdedicace','0','$quand')";

 $sql4 = "INSERT INTO dedicaces (id, pseudo, textdedicace, etat, date) VALUES ('','".mysql_real_escape_string($login)."','".mysql_real_escape_string($textdedicace)."','0','$quand')";