我的mysql代码怎么了？

Question

What is wrong? I get a syntax error. This code was working a week before and I made no changes to it.

Trying the query itself in phpmyadmin gave me the syntax error, any help?

Answer 1

'$version', '0', '1',);
那里的逗号是做什么的

Answer 2

最后一个值后面有逗号-是故意的吗？

Answer 3

If you did not change the query at all and the comma issue others have pointed out is not the answer, then the inputs must have changed. Where are the values like $username and $password coming from? Are they properly escaped/sanitized? If the inputs are not escaped, and a particular value has a single-quote in it, then that would cause a syntax error (more importantly, it would also expose you to SQL injection).

If the values are not currently escaped, the best solution is to use mysql_real_escape_string() on each variable in the insert, or to use prepared statements .

Answer 4

Not using prepared statements in your code is the error.

The safer and better way is to look at mysqli::prepare or pdo::prepare

$stmt = $mysqli->prepare("INSERT INTO `vewy`.`accountinfo` (`id`, `username`, `password`) VALUES (0, ?, ?)");
$stmt->bind_param('ss', $username, $password);
$username = 'admin';
$password = 'stackoverflow';
$stmt->execute();

Answer 5

Where is your code according to mr.robus code

    '$version', '0', '1',);

Yes He's Right We Can't Include comma in after last field