MYSQL插入失败-语法正确吗？

Question

Does anyone see anything wrong with this INSERT statement? This fails for me when used in PHP code. Im using MySql 5.6. dept_id is the primary key.I dont see anything wrong with the syntax but it is failing just the same. Any help would be awesome!

    $add_sql = @mysql_query("INSERT INTO `vf_department` (`dept_id`,`descr`,`sub_dept`)VALUES('','$new_desc','$new_sub')") or die("Can not add item.");

Answer 1

is your primary key an auto increment? If so, you do not need to have it as part of the insert statement.

Answer 2

I agree with ebizzity... if the one column is an auto-increment, leave it out of the insert command, MySQL will generate that for you. As for all the other comments, I'm surprised nobody mentioned your exposure to SQL injection.

if the values for your $new_desc and/or $new_sub contain single quote, that would offset the balance of your command and make it choke... not to mention would COULD happen with sql injection. Look into cleansing incoming data and parameterize your calls.

Answer 3

try this

$add_sql = mysql_query("INSERT INTO `vf_department` (`descr`,`sub_dept`)
          VALUES('$new_desc','$new_sub')") or die(mysql_error());