2013-03-26 99 views
-1

以下是试图打印某些语句的PHP代码。但它是所有打印以下错误:PHP回显代码不能正常工作

解析错误:语法错误,在C意想不到T_STRING:\ Program Files文件\ Apache的集团\的Apache2 \ htdocs目录\ chat_status.php上线8

的代码:

<?php 
session_start(); 
$con=mysql_connect("localhost","hi","hello"); 
mysql_select_db("my_db",$con); 
$check_table=mysql_query("SELECT * FROM `$row[studentid]"."to"."$_GET[id]`); 
if($check_table!=FALSE) 
{ 
$asd="no suggestion"; 
echo $asd; 
} 
else 
{ 
$result1=mysql_query("SELECT * FROM students WHERE email='$_SESSION[user_name]'"); 
$row=mysql_fetch_array($result1); 
$create_table="CREATE TABLE `$row[studentid]"."to"."$_GET[id]`(post_number int not null 
auto_increment,primary key(post_number),data text(20000))"; 
$result=mysql_query($create_table,$con); 
} 

?> 
+4

语法高亮使你的错误远 – 2013-03-26 20:26:14

+1

这是因为在C有意想不到的T_STRING: \ Program Files \ Apache Group \ Apache2 \ htdocs \ chat_status.php第8行 – 2013-03-26 20:26:20

+0

是的,关闭第8行的双引号 – JakeCataford 2013-03-26 20:27:17

回答

0

更改以下行:

$check_table=mysql_query("SELECT * FROM `$row[studentid]"."to"."$_GET[id]`"); 

注收盘"

而且从@ jamie0726(感谢)的评论:

Please do not use $_GET in your query under any circumstances. That's a severe security mistake (SQL injection, it's very easy to delete your database for example with your code.). You can avoid this easily. Check out

+0

小时的代码让你的大脑不在你头上我猜!谢谢。 – kamal0808 2013-03-26 20:28:57

+0

欢迎您;) – hek2mgl 2013-03-26 20:31:18

+2

请不要在任何情况下在您的查询中使用$ _GET。这是一个严重的安全错误(SQL注入,使用你的代码很容易删除你的数据库)。你可以轻松避免这种情况。查看@Quentin上面的链接。谢谢! :-) – herrjeh42 2013-03-26 20:41:31

0

试试这个

<?php 
session_start(); 
$con=mysql_connect("localhost","hi","hello"); 
mysql_select_db("my_db",$con); 
$check_table=mysql_query("SELECT * FROM '$row[studentid]'.'to'.'$_GET[id]' "); 
if($check_table!=FALSE) 
{ 
$asd="no suggestion"; 
echo $asd; 
} 
else 
{ 
$result1=mysql_query("SELECT * FROM students WHERE email='$_SESSION[user_name]'"); 
$row=mysql_fetch_array($result1); 
$create_table="CREATE TABLE '$row[studentid]'.'to'.'$_GET[id]' (post_number int not null 
auto_increment,primary key(post_number),data text(20000))"; 
$result=mysql_query($create_table,$con); 
} 

?>