PHP表單數據插入在MySQL

Question

我試圖插入數據庫某種形式發佈數據，但它顯示了錯誤：

Error: INSERT INTO user_data (name, age, gender,happy,sad,angry) VALUES (Sourav,23,male,3.5,2.75,1.5) 
Unknown column 'Sourav' in 'field list' 

我使用的查詢：

$sql = "INSERT INTO user_data (name, age, gender,happy,sad,angry) 
VALUES (" . $name . "," . $age . "," . $gender . "," . $happyness . "," . $sadness . "," . $angryness . ")"; 

Answer 1

你有將字符串值放在引號內。如下更新代碼。

$sql = "INSERT INTO user_data (name, age, gender,happy,sad,angry) 
VALUES ('" . $name . "','" . $age . "','" . $gender . "','" . $happyness . "','" . $sadness . "','" . $angryness . "')"; 

此外，您的代碼是不安全的。插入表單數據時使用轉義字符串。

Answer 2

使用''像'Sourav'

INSERT INTO user_data (name, age, gender,happy,sad,angry) 
VALUES ('Sourav','23','male','3.5','2.75','1.5') 

或類似的

$sql = "INSERT INTO user_data (name, age, gender,happy,sad,angry) 
VALUES ('$name','$age','$gender','$happyness','$sadness','$angryness')"; 

Answer 3

試試這個..，

$sql = "INSERT INTO user_data (name, age, gender,happy,sad,angry) 
VALUES ('" . $name . "','" . $age . "','" . $gender . "','" . $happyness . "','" . $sadness . "','" . $angryness . "')"; 

希望這有助於..

Answer 4

更改您的查詢：

$sql = "INSERT INTO user_data (name, age, gender,happy,sad,angry) 
VALUES ('$name','$age','$gender','$happyness','$sadness','$angryness')"; 

Answer 5

你真的應該看看和mysqli或pdo擴展 - 或者至少是使用某種類型的引用您的參數，像mysql_real_escape_string。直接將用戶輸入傳遞給數據庫查詢可以很容易地用於mysql注入。

使用PDO你可以寫你這樣的代碼：

$db = new PDO('mysql:host=localhost;dbname=testdb;charset=utf8', 'username', 'password'); 
$name = 'BOB'; 
$password = 'badpass'; 
$stmt = $db->prepare("INSERT INTO table(`hexvalue`, `password`) VALUES(HEX(?), PASSWORD(?))"); 
$stmt->execute(array($name, $password));