取得SQL语法错误

Question

I have a line of code in PHP as follows...

mysql_query("INSERT INTO `updates` (project_id, date, update) VALUES ('{$project}', '{$date}', '{$update}')") or die(mysql_error());

However I'm getting the following SQL syntax error...

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'update) VALUES ('14', '2012-05-06', 'Test update')' at line 1

If anyone could help me with this that would be great, perhaps it's obvious but I just can't see what's wrong here!

Answer 1

Change the query as below:

mysql_query("INSERT INTO `updates` (`project_id`, `date`, `update`) VALUES ('{$project}', '{$date}', '{$update}')") or die(mysql_error());

This is because date and update are registered keywords in MySQL. We cannot use it directly in the query. We need to escape it.

Answer 2

date and update are reserved words in MySQL.

You can use:

"INSERT INTO `updates` (project_id, `date`, `update`) VALUES ('{$project}', '{$date}', '{$update}')"

Though ideally you should never use a reserved word as an entity name. It offers no advantages, yet has a few minor disadvantages (for example, makes the SQL less portable).

Also, a fairly minor point, if project_id is an integer typed field, pass it an integer, not a string. Like:

 INSERT INTO `updates` (project_id, `date`, `update`) VALUES ({$project}, '{$date}', '{$update}')

Answer 3

update是SQL中的关键字，将您的mysql字段封装在反引号中。

Answer 4

First and foremost Thing: you can not user mysql preserver word. When you use it, be ready to waste your hours in finding out error. Here is the list of reserve words: DO NOT USE ANY AMONG IT http://dev.mysql.com/doc/refman/5.5/en/reserved-words.html

Second: Even if you want to dare to use preserved keyword. User table prefix or column prefix along with reserved keyword.

Third: When ever you perform the database operations along php either quote each and every parameter where required or just user simple one. ie if you wish to quote db table columns than surround each column by quote

"INSERT INTO `updates` (`project_id`, `date`, `update`) VALUES ('{$project}', '{$date}', '{$update}')"

and if you don't quote then quote none of them

"INSERT INTO updates (project_id, date, update) VALUES ('{$project}', '{$date}', '{$update}')"

Hope this would help you