php - INSERT INTO 语法错误，但通常应该可以工作

Question

当插入到 mysql 时，我反复收到语法错误，通常这工作正常，但我似乎无法让它工作。我可以毫无问题地回显变量，但由于某种原因我无法插入它们。

变量( session 变量是从另一个页面带来的)

session_start();
$name=$_SESSION['bName'];
$email=$_SESSION['email'];
$ship_address = $_SESSION['sAddress'];
$voucher=$_SESSION['voucher'];
$sku=$_SESSION['sku'];
$credit_card=$_POST['credit_card'];
$security_code=$_POST['security_code'];
$payment_type=$_POST['payment_type'];
$cc_number=substr($credit_card, 0, 4) . str_repeat('x', (strlen($credit_card) - 4)) . substr($credit_card, -4, 4);
$phone=$_SESSION['billPhone'];
$status="Redeemed";
$date = date('Y/m/d');
$tracking ="";

插入查询

//Insert Queries
$sqlInsert = "INSERT INTO `customers`(`name`, `email`, `address`, `phone`, `sku`, `creditcard`, `securitycode`, `paymenttype`, `voucher`, `purchase_id`, `tracking`, `status`, `date_recieved`) 

VALUES( $name, $email, $ship_address, $phone, $sku, $credit_card, $security_code, $payment_type, $voucher, $purchase_id, $tracking, $status, $date)";
    mysql_query($sqlInsert) or die ('Error Inserting into database' . mysql_error());

我也尝试过

VALUES( '$name', '$email', '$ship_address', '$phone', '$sku', '$credit_card', '$security_code', '$payment_type', '$voucher', '$purchase_id', '$tracking', '$status', '$date')

但它不起作用。我得到的错误是

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'lastname, fahad@semail.com, 22 toronto ont l6a0l4, 416-123-4567, 1001234, 1234567' at line 1

有什么想法吗？

谢谢

Answer 1

所有字符串值都必须加引号。

VALUES("'.$name.'", "'.$email.'" ...