PHP / SQL-错误的语法

Question

I'm new to MySQL Queries. This is what I have so far what did I do wrong?

"INSERT INTO users (ip) WHERE id = '".$_SESSION["user"]["id"]."' 
VALUES ('$ip')"

EDIT

I just was asking about how my syntax was wrong. I understand the vulnerabilities, and did not paste them in my question. I am using the PDO library and mysql_real_string_escape WHENEVER I can...

Answer 1

INSERT query is wrong. I think you are updating something and you need to use UPDATE query

UPDATE users SET ip = '$ip' WHERE id = '".$_SESSION["user"]["id"]."' 

Also work on fixing sql injection attacks.

Answer 2

INSERT INTO users (ip) 
VALUES ('value to insert')

or

UPDATE users
SET ip = 'value to update'
WHERE ip = 'value to check'

Also, wrap your value to update and value to insert in a PHP mysqli_real_escape_string($DB,$val)

Answer 3

  INSERT INTO table_name (column1, column2, column3,...)
  VALUES (value1, value2, value3,...)
  WHERE column_name operator value

sql injection info