[英]PHP syntax error with this MySQL query
MySQL claims I have a syntax error in my query, but I cannot seem to fix it completely. MySQL声称我的查询中有语法错误,但我似乎无法完全修复它。 Any ideas?
有任何想法吗?
The error states: "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '..'','0',''..', '..'','','','','','','')' at line 2" 该错误指出: “您的SQL语法中有错误;请查看与您的MySQL服务器版本对应的手册,以便在'..'','0',''..'附近使用正确的语法,'.. '','','','','','','')'在第2行“
The line is here: 这条线在这里:
$savequery = "INSERT INTO search (title, description, url, keywords, type, mod_url, developer, v162, v164, v172)
VALUES ('$name', '$desc', '$url', '$keywords', '$type', '$link', '$dev', '$v162', '$v164', '$v172')";
Also, here's the "run or die" variable for that query: 此外,这是该查询的“运行或死亡”变量:
$save = $dbsave->query($savequery) or die(mysqli_error($dbsave));
UPDATE: 更新:
Because it has been requested, here's my variable sanitation: 因为已经要求,这是我的变量卫生:
$name = mysql_real_escape_string($name);
$desc = mysql_real_escape_string($desc);
$url = mysql_real_escape_string($url);
$keywords = mysql_real_escape_string($keywords);
$type = mysql_real_escape_string($type);
$link = mysql_real_escape_string($link);
$dev = mysql_real_escape_string($dev);
$v162 = mysql_real_escape_string($v162);
$v162 = mysql_real_escape_string($v164);
$v162 = mysql_real_escape_string($v172);
$id = mysqli_real_escape_string($id);
You should use $mysqli->real_escape_string($varHere);
你应该使用
$mysqli->real_escape_string($varHere);
on every one of those variables. 在每个变量上。 I would use a loop:
我会用一个循环:
$vars = array($name, $desc, $url, $keywords, $type, $link, $dev, $v162, $v164, $v172);
foreach($vars as $v){
$qA[] = $mysqli->real_escape_string($v); // Object Oriented Style
}
$savequery = "INSERT INTO search (title, description, url, keywords, type, mod_url, developer, v162, v164, v172) VALUES ('$qA[0]', '$qA[1]', '$qA[2]', '$qA[3]', '$qA[4]', '$qA[5]', '$qA[6]', '$qA[7]', '$qA[8]', '$qA[9]')";
If you don't like those Array variables then you can use list()
. 如果您不喜欢这些Array变量,那么您可以使用
list()
。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.