mysql 數據庫 SQLSTATE[42000]：語法錯誤或訪問沖突：1064 您的 SQL 語法有誤

Question

我從這段代碼中得到錯誤我不知道如何弄清楚

<?php
    include "db.php";
    include "auth.php";
    if(isset($_GET["getlist"]))
    {
        $uid=$_GET["getlist"];
        
        $sql="SELECT * FROM devices WHERE brand_id=:uid ORDER BY id ASC";
        $query=$db->query($sql);
        $devices=$query->fetchAll(PDO::FETCH_OBJ);

    }
?>

Answer 1

由@lawrence-cherone 幫助完成

這是答案

<?php
    include "db.php";
    include "auth.php";
    if(isset($_GET["getlist"]))
    {
        
        try {
            $uid=(int)$_GET["getlist"];
            $sql=$db->prepare("SELECT * FROM devices WHERE brand_id = :uid ORDER BY id ASC");
            $sql->execute([':uid' => $uid]);
            $devices = $sql->fetchAll(PDO::FETCH_OBJ);
            } catch (Exception $e) {
            echo 'Caught exception: ',  $e->getMessage(), "\n";
        }
    }
?>