2011-11-18 91 views
0

我能做些什么来解决这个SQL查询?SQL Query有什么问题?

$q = $db->sqlQuery("SELECT * FROM project WHERE email = " . $email . ""); 
+1

我的猜测是,你需要添加周围的'$电子邮件报价'字符串。我希望字符串被消毒... – lonesomeday

回答

1

你可以试试这个:

$q = $db->sqlQuery("SELECT * FROM project WHERE email = '" . $email . "'"); 

它缺少的单引号'应封闭$email值,因为它是一个字符串。

2
 
$q = $db->sqlQuery("SELECT * FROM project WHERE email = '" . $email . "'"); 

0

逃离参数。

$q = $db->sqlQuery("SELECT * FROM project WHERE email = '" . $email . "'"); 
2
$q = $db->sqlQuery("SELECT * FROM project WHERE email = '$email'"); 
1
$q = $db->sqlQuery("SELECT * FROM project WHERE email = '" . $email . "'"); 

您需要使用 '' 字符串变量

错误:SELECT * FROM project WHERE email = [email protected]

确定:SELECT * FROM project WHERE email = '[email protected]'