INSERT在服務器上失敗，在

Question

上使用magic_quotes

我一直在努力讓我的數據插入到我的表中。數據從xml文件中拉入數組中，並且echo'ing結果正常，但插入失敗。

$dbhost = 'XXXX'; 
$dbuser = 'XXXX'; 
$dbpass = 'XXXX'; 

$conn = mysql_connect($dbhost, $dbuser, $dbpass) or die ('Error connecting to mysql'); 

if($conn) 
{ 
echo "Database Connection Successfull...<br /><br />"; 
} 

$dbname = 'a4027212_footy'; 
mysql_select_db($dbname) or die('Couldnt connect to database table'); 

if($dbname) 
{ 
echo "Database ".$dbname." Selected..<br /><br />"; 
} 

    $tweetmeme = "http://api.tweetmeme.com/stories/popular.xml?category=sports-soccer&count=30" ; 

    $xml = @simplexml_load_file($tweetmeme) or die ("no file loaded") ; 
    if($xml) 
    { 
echo "Tweetmeme XML loaded with ".count($xml->stories->story)." stories in the file..<br /><br />"; 
    } 
if(get_magic_quotes_gpc()) 
{ 
echo "Magic Quotes is ON<br /><br />"; 
} 
foreach($xml->stories->story as $story) 
{ 
    $title=$story->title; 
$title=mysql_real_escape_string($title); 

$url=$story->url; 
$url=mysql_real_escape_string($url); 

$media_type=$story->media_type; 
$media_type=mysql_real_escape_string($media_type); 

$created=$story->created_at; 
$created=mysql_real_escape_string($created); 


$url_count=$story->url_count; 
$url_count=mysql_real_escape_string($url_count); 

$comment_count=$story->comment_count; 
$comment_count=mysql_real_escape_string($comment_count); 

$excerpt=$story->excerpt; 
$excerpt=mysql_real_escape_string($excerpt); 

$sql = "INSERT INTO ft_tweets (title,url,media_type,created_at,mention_count,comment_count,excerpt) VALUES ($title,$url,$media_type,$created,$url_count,$comment_count,$excerpt)"; 

$result = mysql_query($sql) or die(mysql_error()); 
if($result) 
{ 
echo "added to database<br />"; 
} 
} 
echo "<br /><br />"; 

香港專業教育學院被告知，插入會如果有字符串和mysql_real_escape_string（在特殊字符）失敗會幫助，但處理不當。我曾嘗試過，但沒有逃脫無濟於事。

返回的錯誤消息是：您的SQL語法中有錯誤;檢查與您的MySQL服務器版本相對應的手冊，以獲取在off附近使用的正確語法。腳踝在這裏看起來很糟糕。 ？在Twitpic），mysql_real_escape_string（http://twitpic.c'在行1

和失敗的SQL插入

Answer 1

身在何方是「關」開始是你遇到麻煩的性格。我想呼應先出$ sql，然後是quit（）;命令。然後，你會看到薩維恩提到的字符串中缺少的引號。

我還發現this引用有魔術引號服務器開啓：

<?php 
function check_input($value) 
{ 
// Stripslashes 
if (get_magic_quotes_gpc()) 
    { 
    $value = stripslashes($value); 
    } 
// Quote if not a number 
if (!is_numeric($value)) 
    { 
    $value = "'" . mysql_real_escape_string($value) . "'"; 
    } 
return $value; 
} 

Answer 2

$sql = "INSERT INTO ft_tweets (title,url,media_type,created_at,mention_count,comment_count,excerpt) VALUES ($title,$url,$media_type,$created,$url_count,$comment_count,$excerpt)"; 

哪裏圍繞$標題單引號，$網址等它應該是：

$sql = "INSERT INTO ft_tweets (title,url,media_type,created_at,mention_count,comment_count,excerpt) VALUES ('$title','$url','$media_type','$created','$url_count','$comment_count','$excerpt')"; 

Ofcourse，你可以忽略單引號數字領域。