sql Error

Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '@hotmail.com ,$2y$10$Px0B010krleMbVs3oylxBukvt1kCjEgJSjFqCBgMk/jICW1cl0XRq ,fals' at line 1


// register.php
<?php

include_once ("connect.php");

$email = $_POST['email'];
$pw = password_hash($_POST['password'],PASSWORD_DEFAULT);


if(mysqli_query($link,"INSERT INTO users VALUES (null ,$email ,$pw ,false)") === TRUE)
    echo "Cadastrado com sucesso!";
else
     printf("Error: %s\n", mysqli_error($link));

?>