php更新--- T_CONSTANT_ENCAPSED_STRING錯誤

Question

請幫我在這裏，我不知道什麼是實際的錯誤意味着什麼，但我正在尋找任何方式使這項工作！請！

<?php 

//session_start(); 
include("config.php"); 
include("auth.php"); 

if($_SESSION['SESS_MEMBER_ID'] != 'true') { 
// header("location:member-index.php"); 
    } 

//connects to database 
$link = mysql_connect(DB_HOST, DB_USER, DB_PASSWORD); 
if (!$link) { 
    die("Failed to connect to server: " . mysql_error()); 
    } 

    //selects database 
$db = mysql_select_db(DB_DATABASE); 
if (!$db) { 
    die ("Unable to select database"); 
    } 

這是哪裏出錯

$qry = "UPDATE members set firstname="'.$firstname.'", lastname="'.$lastname.'", location="'.$location.'", email="'.$email.'", cell_number="'.$cell_number.'", home_number="'.$home_number.'", about="'.$about.'" where member_id="'.$_SESSION['SESS_MEMBER_ID'].'" " 


$result = @mysql_query($qry); 


?> 

Answer 1

變化

$qry = "UPDATE members set firstname="'.$firstname.'", lastname="'.$lastname.'", location="'.$location.'", email="'.$email.'", cell_number="'.$cell_number.'", home_number="'.$home_number.'", about="'.$about.'" where member_id="'.$_SESSION['SESS_MEMBER_ID'].'" " 

到

$qry = "UPDATE members set firstname='".$firstname."', lastname='".$lastname."', location='".$location."', email='".$email."', cell_number='".$cell_number."', home_number='".$home_number."', about='".$about."' where member_id='".$_SESSION['SESS_MEMBER_ID']."' "; 

注：強烈建議使用預準備語句代替使用mysql_ *函數。