php中的sql更新查詢

Question

我正在嘗試在php中執行更新查詢以更新數據庫，但該查詢無法正常工作。 這可能很簡單。

$query = "UPDATE Events 
          SET charity_name = '$charity_name' ,
              charity_reg = $charity_reg ,
              Event_Name = '$event_tit', 
              Event_Status_Code = '$event_stat', 
              Start_Date = $event_dat, 
              Hours = $event_hour, 
              location = '$event_loc', 
              Other_Details = $event_content,
              event_image = $imageData, 
              image_name = '$imageName', 
              max_available_spaces = $event_spaces, 
              Event_type = '$eve_category', 
              event_cost = $event_cost, 
              event_organiser = '$event_organiser' 
          WHERE Event_ID = $the_event_id";

Answer 1

您不會在某些值周圍加上引號（''），除非所有這些值均為布爾值/整數，否則可能會出現問題。 確保將所有值都用引號引起來，例如'$imageData'而不是$imageData 。在直接在查詢中輸入值時也要注意sql注入。 更好地使用准備好的語句

$query = "UPDATE Events 
          SET charity_name = '$charity_name' ,
              charity_reg = '$charity_reg' ,
              Event_Name = '$event_tit', 
              Event_Status_Code = '$event_stat', 
              Start_Date = '$event_dat', 
              Hours = '$event_hour', 
              location = '$event_loc', 
              Other_Details = '$event_content',
              event_image = '$imageData', 
              image_name = '$imageName', 
              max_available_spaces = '$event_spaces', 
              Event_type = '$eve_category', 
              event_cost = '$event_cost', 
              event_organiser = '$event_organiser' 
          WHERE Event_ID = $the_event_id;";

編輯：如@dWinder所述：如果$the_event_id不是整數，請確保也將引號引起來。