这个PHP MySQL查询有什么问题？

Question

I keep getting the following error:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1

For the following query:

$query = "SELECT `Gift`, `Type` 
            FROM `gifts` 
           WHERE `User`= '".mysql_real_escape_string($myuid)."' 
           LIMIT ".$start.", ".$end;

$start = $_GET['start'];
if($start = "") {
  $start = 0;
}
$end = $_GET['end'];
if($end = "") {
  $end = 7;
}

I tested this script in another browser, and it worked just fine. The problem is something with Internet Explorer 9. Anyone know why?

Answer 1

You should print the query out before it's sent to the database:

$start = $_GET["start"];
$end = $_GET["end"];

$query = "SELECT `Gift`, `Type` 
            FROM `gifts` 
           WHERE `User`= '".mysql_real_escape_string($myuid)."' 
           LIMIT ".$start.", ".$end;

echo $query;

Update

The OP provides in the comments to this answer that the start & end values aren't appearing in the output, and the values are supplied by a GET request.

The output would give us a better idea what the issue is, but I recommend using sprintf to parameterize the query:

$query = sprintf("SELECT g.gift,
                         g.type
                    FROM GIFTS g
                   WHERE g.user = '%s'
                   LIMIT %u, %u",
                  mysql_real_escape_string($myuid),
                  $_GET["start"], 
                  $_GET["end"]);

Answer 2

Check the return value of mysql_real_escape_string($myuid) . Maybe it is not returning anything.

Answer 3

the error supplied should give you a clue -

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1

It is saying that there is an error near ''. I would be checking then value of mysql_real_escape_string($myuid). ensure you have escaped any quotes "'" and that the value is already not quoted.

Answer 4

I had the exact same trouble few minutes ago and that trouble was only on Internet explorer too. On Chrome, Firefox work just fine.

I know the script works fine as the Info is updated in the Database.

The trouble in my side was the redirection after the process. <meta http-equiv="refresh" content="0;url=fileX.php" /> And as I can see IE does not like to have url in lower case. By setting it this way <meta http-equiv="refresh" content="0;**URL**=fileX.php" /> it works just fine.

First time it runs ok. But then it refresh and has 0 valu so that why we are getting that error from SQL. At my eye this is not a server side error but IE that does not want to read the code as all other browser.

Answer 5

Some of your quotes are all at an angle; they need to be like this: ' not: `