php - mysql语法错误

Question

<?php
ob_start();
$id=$_REQUEST['req-id'];
// @header("location:feed.php?tumblr_id=$id");
echo "aaaa";
include_once('../config/config.php');
echo $name=$_REQUEST['req-name'];
echo $id=$_REQUEST['req-id'];
echo $mobile=$_REQUEST['req-mobile'];
echo $Email=$_REQUEST['req-email'];
echo $select=$_REQUEST['image'];
echo $img=$_REQUEST['img'];
echo $audio=$_REQUEST['audio'];
echo $ado=$_REQUEST['ado'];
echo $regular=$_REQUEST['regular'];
echo $reg=$_REQUEST['reg'];
echo $video=$_REQUEST['video'];
echo $vdo=$_REQUEST['vdo'];
echo $link=$_REQUEST['link'];
echo $lnk=$_REQUEST['lnk'];
echo $quote=$_REQUEST['quote'];
echo $qte=$_REQUEST['qte'];
echo $fbPid=$_REQUEST['fbPid'];
 $sql="update tumblr set (tumblr_name,tumblr_id,mobile_no,Email,img_post,link_post,ado_post,vdo_post,reg_post,qte_post) values('$name','$id','$mobile','$Email','$img','$lnk','$ado','$vdo','$reg','$qte')";
$res=mysql_query($sql) or die(mysql_error());

?>

我收到错误消息:- 您的 SQL 语法有误；查看与您的 MySQL 服务器版本对应的手册，了解在第 1 行的“(tumblr_name,tumblr_id,mobile_no,Email,img_post,link_post,ado_post,vdo_post,reg_”附近使用的正确语法

Answer 1

UPDATE tumblr 
   SET tumblr_name = '$name',
       tumblr_id = '$id',
       mobile_no = '$mobile',
       Email = '$Email',
       img_post = '$img',
       link_post = '$lnk',
       ado_post = '$ado',
       vdo_post = '$vdo',
       reg_post = '$reg',
       qte_post = '$qte'

您正在尝试根据插入格式执行更新查询。检查update query format .

此外，您的代码非常不安全。至少使用 mysql_real_escape_string()，例如$name=mysql_real_escape_string($_REQUEST['req-name']); 以防止 SQL 注入(inject)。