INSERT INTO数据库不起作用

Question

I'm trying to enter data into a database (it's a reactions script) but I always get a error and it's driving my crazy.

This is the code that i'm using:

    if (mysql_query("INSERT INTO gastenboek (naam, bericht, datum, ip, plantid) VALUES ('".trim(mysql_real_escape_string($_POST['naam']))."', '".trim(mysql_real_escape_string($_POST['bericht']))."', $datum_reactie, '".mysql_real_escape_string($_SERVER['REMOTE_ADDR'])."', $id)")) {
        echo '<span style="color:green; font-weight: bold"Je reactie is succesvol toegevoegd!</span>';
    } else {
        echo '<span style="color:green; font-weight: bold">Er is iets fout gegaan en je reactie is niet toegevoegd. Probeer het later opnieuw.</span>';
    }

That doesn't seem to work. But when I display the data using the following code:

    if (mysql_query("INSERT INTO gastenboek (naam, bericht, datum, ip, plantid) VALUES ('".trim(mysql_real_escape_string($_POST['naam']))."', '".trim(mysql_real_escape_string($_POST['bericht']))."', $datum_reactie, '".mysql_real_escape_string($_SERVER['REMOTE_ADDR'])."', $id)")) {
        echo '<span style="color:green; font-weight: bold"Je reactie is succesvol toegevoegd!</span>';
    } else {
        echo '<span style="color:green; font-weight: bold">Er is iets fout gegaan en je reactie is niet toegevoegd. Probeer het later opnieuw.</span>';
        $qry = "INSERT INTO gastenboek (naam, bericht, datum, ip, plantid) VALUES ('".trim(mysql_real_escape_string($_POST['naam']))."', '".trim(mysql_real_escape_string($_POST['bericht']))."', $datum_reactie, '".mysql_real_escape_string($_SERVER['REMOTE_ADDR'])."', $id)"; echo $qry;
    }

This is what I get:

So everything seems right?

This is what my database looks like:

Answer 1

Looks like you need quotes around the date value in the third column.

You might want to use bind variables because it will make the quotes easier to work with and safer (from a SQL injection perspective). Something like this:

$stmt = mysqli_prepare($db, "INSERT INTO gastenboek (name, bericht, datum, ip, platid) VALUES (?, ?, ?, ?, ?)");

mysqli_stmt_bind_param ($stmt, 'sssss', $_POST['naam'], $_POST['bericht'], $datum_reactie, $_SERVER['REMOTE_ADDR'], $id);

mysqli_stmt_execute($stmt);

Answer 2

Try to quote your 'date' field. This might fix things for you.

Answer 3

You could use ( http://php.net/manual/en/function.mysql-error.php ):

echo mysql_errno($link) . ": " . mysql_error($link) . "\n";

That returns the last error of mysql. As said Lashane put '$datum_reactie'

Also, I have to say it: "don't use msysql_*, it's deprecated".

Answer 4

查询可能由于多种原因而失败-语法错误，不存在的表/列，权限不足等。您最好的选择是使用mysql_error（）/ mysql_errno（）在失败时打印错误（在else {}中）。 。

Answer 5

是的...因为所有都是varchar或文本，所以必须将所有值都用单引号引起来