插入一个电子邮件地址

// write student record 
$query = "INSERT INTO Student (SLastName, SFirstName, SeMail, SGrade, SPhone, SCell, SLunch)". 
" VALUES ($LastName, $FirstName, $email, $grade, $phone, $cell, $lunch)"; 
echo $query . '<br />'; 
$result = mysql_query($query); 
if (!$result) 
    die("Error inserting Student record: ". mysql_error());

INSERT INTO Student (SLastName, SFirstName, SeMail, SGrade, SPhone, SCell, SLunch) 
VALUES (Weiner, Wendy, [email protected], 12, 2123334444, 8458765555, 5)

Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '@gmail.com, 12, 2123334444, 8458765555, 5)' at line 1插入一个电子邮件地址

Server版本表字段：5.0.91社区

来源

2010-08-18 Steph

您从little Bobby Tables通过邀请访问用户提供在SQL查询中未转义的数据。

要么使用mysql_real_escape_string来定义输入，要么使用PDO来做得更好。

来源

2010-08-18 22:08:00 Borealid

难道不该

INSERT INTO Student (SLastName, SFirstName, SeMail, SGrade, SPhone, SCell, SLunch) 
VALUES (Weiner, Wendy, '[email protected]', 12, 2123334444, 8458765555, 5)

我。即与电子邮件地址在引号？

来源

2010-08-18 22:08:18 Frank

你需要加上引号过其他琴弦（虽然谁downranked你是作为一个有点意思。） – fredley 2010-08-19 18:57:35

您需要包住引号你的价值观：

$query = "INSERT INTO Student (SLastName, SFirstName, SeMail, SGrade, SPhone, SCell, SLunch)". " VALUES ('$LastName','$FirstName','$email', '$grade', '$phone', '$cell', '$lunch')";

来源

2010-08-18 22:08:22 fredley

叶，我想也知道。另一个答案，似乎有点苛刻。 – fredley 2010-08-19 18:57:07

插入一个电子邮件地址

回答

相关问题