簡單的mysql數據庫

Question

我創建一個簡單的mysql數據庫，但我得到了以下錯誤：Parse error: syntax error, unexpected 'aasda' (T_STRING)在線：VALUES ("aasda", "sa", "asda", 43, "ada")");

下面是代碼：

$con=mysql_connect("localhost","root",""); 

if (!$con) 
{ 
    die ("Could not connect: " . mysql_error()); 
} 
if (mysql_query("CREATE DATABASE my_db",$con)) 
    { 
    echo "Database created"; 
    } 
else 
{ 
die("not"); 
} 
mysql_select_db("my_db", $con); 
$sql = "CREATE TABLE Users 
(
username varchar(20), 
firstname varchar(15), 
lastname varchar(15), 
age int, 
emailadress varchar(20) 
)"; 

mysql_query($sql,$con); 

mysql_query("INSERT INTO Users (username, firstname, lastname, age, emailadress) 
VALUES ("aasda", "sa", "asda", 43, "ada")"); 


mysql_close($con); 

我不understant我在做什麼錯誤。感謝您的幫助和耐心！

Answer 1

使用單引號

mysql_query("INSERT INTO Users (username, firstname, lastname, age, emailadress) 
      VALUES ('aasda', 'sa', 'asda', 43, 'ada')"); 

還有一件事，你的查詢是針對SQL Injection脆弱的，請採取以下TIMET閱讀文章，以保護自己免受SQLInjection

• How can I prevent SQL injection in PHP?

Answer 2

mysql_query("INSERT INTO Users (username, firstname, lastname, age, emailadress) 
VALUES ('aasda', 'sa', 'asda', 43, 'ada')");