使用JINPUT（Joomla）的SQL语法错误

Question

如先前所建议，我将JINPUT与Joomla一起使用，以将数据提交到我准备好的SQL表中。 当按下提交按钮时，出现以下错误：

您的SQL语法有误； 检查对应于您MariaDB的服务器版本的手册，在第3行SQL使用附近的“测试，hgrhsghf ,,轻微，正在进行中）”正确的语法= INSERT INTO tud_website_issues （ userid ， rdate ， description ， area ， subsection ， urgency ， status ）VALUES（488，，Test，hgrhsghf ,, Minor，In Progress）

我不确定确切的问题是什么，我尝试查找错误，但找不到问题。 这是我的主要代码：

<?php
$jinput = JFactory::getApplication()->input;
if(isset($_POST['submitrepair'])) {
    $db = JFactory::getDbo();
    $query = $db->getQuery(true);
    $user = JFactory::getUser();
    $userID = $user->get( 'id' );
    $date = getdate("d/m/Y");
    $description = $jinput->get('description', null , null);
    $section = $jinput->get('subsection', null , null);
    $subsection = $jinput->get('area', null , null);
    $urgency = $jinput->get('urgency', null , null);
    $status = "In Progress";
    $columns = array('userid', 'rdate', 'description', 'area', 'subsection', 'urgency', 'status');
    $values = array($userID, $date, $description, $section, $subsection, $urgency, $status);
    $query
        ->insert($db->quoteName('#__website_issues'))
        ->columns($db->quoteName($columns))
        ->values(implode(',', $values));
    $db->setQuery($query);
    $db->execute();
    echo "Issue Successfully Reported!";
}
echo "<table style='text-align:center;text-align:center;margin-left:41%;'>";
echo "<tr><td><h4>Report Website Issue</h4></td></tr>";
echo "<tr><td><form method='post'><select name='area'  onchange='this.form.submit()'>
<option value=''>Select Website Area</option>
<option value='General'>General</option>
<option value='Emails'>Emails</option>
<option value='Education'>Education</option>
<option value='Reviews'>Reviews</option>
<option value='Store'>Store</option>
<option value='Toolkit'>Toolkit</option>
<option value='Membership'>Membership</option>
<option value='Other'>Other</option>
</select></form>
</td></tr>";
echo "<form method='post'>";
$selected = $jinput->get('area', null, null);
echo "<tr><td><h5><center>Current Area Selected: $selected</center></tr></td></h5>";
if($selected == 'General') {
    echo "<tr><td><input type='text' name='subsection' placeholder='Subsection'></td></tr> ";
}
else if($_POST['area'] == 'Emails') {
    echo "<tr><td><select name='subsection'>
    <option value=''>Select Email System</option>
    <option value='Notification'>Notifications</option>
    <option value='Newsletter'>Newsletter</option>
    <option value='Store'>Store Emails</option>
    </select></td></tr>";
}
else if($selected == 'Education') {
    echo "<tr><td><select name='subsection'>
    <option value=''>Select Subsection</option>
    <option value='Lighting'>Lighting</option>
    <option value='Sound'>Sound</option>
    <option value='Rigging'>Rigging</option>
    <option value='StageManagement'>Stage Management</option>
    <option value='ConsoleTraining'>Console Training</option>
    <option value='Tips'>Tips</option>
    </select></td></tr>";
}
else if($selected == 'Reviews') {
    echo "<tr><td><input type='text' name='subsection' placeholder='Specific Review'></td></tr> ";
}
else if($selected == 'Toolkit') {
    echo "<tr><td><input type='text' name='subsection' placeholder='Specific Tool'></td></tr> ";
}
else if($selected == 'Membership') {
    echo "<tr><td><select name='subsection'>
    <option value=''>Select Membership Plan</option>
    <option value='Member'>Member</option>
    <option value='Student'>Student</option>
    <option value='Educator'>Educator</option>
    </select></td></tr>";
}
else if($selected == 'Other') {
    echo "<tr><td><input type='text' name='subsection' placeholder='Subsection'></td></tr> ";
}
echo "<tr><td><select name='urgency'>
<option value=''>Select Urgency</option>
<option value='Minor'>Minor</option>
<option value='Serious'>Serious</option>
<option value='Urgent'>Urgent</option>
</select></td></tr>";
echo "<tr><td><textarea rows='6' cols='50' name='description' placeholder='Please Describe The Issue'></textarea></td></tr>";
// Submit
echo "<tr><td><input type='submit' name='submitrepair' value='Submit Issue'>";
echo "</form></table><hr>";

任何想法如何解决这个问题？ 提前致谢。

Answer 1

在值数组中使用$db->quote

$values = array($userID, $db->quote($date), $db->quote($description), $db->quote($section), $db->quote($subsection), $db->quote($urgency), $db->quote($status));