2013-08-25 38 views
-1

這裏是MySQL錯誤即時得到:和錯誤的SQL語法

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'SELECY * FORM user WHERE username='' AND password='' LIMIT 1' at line 1 

這裏是我的代碼:

<?php 
session_start(); 
include_once("connect.php"); 

if (isset($_POST['username'])) { 
    $username = $_POST['username']; 
    $password = $_POST['password']; 
    $sql = "SELECY * FORM users WHERE username='".$username."' AND password='".$password."' LIMIT 1"; 
    $res = mysql_query($sql) or die(mysql_error()); 
    if (mysql_num_rows($res) == 1) { 
     $row = mysql_fetch_assoc($res); 
     $_SESSION['uid'] = $row ['id']; 
     $_SESSION['username'] = $row ['username']; 
     header("Location: index.php"); 
     exit(); 
    } else {  
     echo "Invalid login information. Please return to the previous page."; 
     exit(); 
    } 
} 
?> 

有人能幫助我嗎? :) 我不知道即時通訊工作在這裏工作,找不到錯誤。

+0

正確的拼寫爲'SELECT',不'SELECY'。 –

+1

另外[SQL注入](http://xkcd.com/327/) –

+1

這是我見過的最瘋狂的問題,但它當你學習東西時okk – bhawin

回答

2
SELECY 

是一個拼寫錯誤,請嘗試:

SELECT 
+0

哦,愚蠢的我,謝謝! :) – user2714117

+0

和形式從 –

+0

哈哈,是啊,太 – leftclickben

1
$sql = "SELECY * FORM users 
WHERE username='".$username."' 
AND password='".$password."' 
LIMIT 1"; 

變化SELECYSELECTFORMFROM

正確的查詢應該是:

$sql = "SELECT * FROM users 
WHERE username='".$username."' 
AND password='".$password."' 
LIMIT 1"; 
+0

和形式從... –