MySQL表插入

Question

Is this accepted syntax? More importantly, will it work?

$temp = mysql_query("INSERT INTO streamer_ids (username,streamer_id,premium) VALUES($username,$randstring,0)");
    $temp->closeCursor();

Answer 1

You need to put quotes around the strings to make it work.

mysql_query("INSERT INTO streamer_ids (username,streamer_id,premium)
             VALUES('$username', '$randstring', '0')");

Sp. if you are connected to MySQL, then it will work WITH these changes. Also, don't forget to take preventive measures against SQL injection attacks. For that, you should do this to all the variables before running the query:

$username = mysql_real_escape_string($username);
$randstring = mysql_real_escape_string($randstring);
$premium = intval($premium); //supposing it is always integer.

Answer 2

$tempquery = "INSERT INTO streamer_ids (username,streamer_id,premium) VALUES($username,$randstring,0);
$result = mysql_query($tempquery);

Thanks.