php - 使用 mysqli 查询失败

Question

亲爱的 stackoverflow 社区，我似乎遇到了问题。我正在为我的 SAMP 服务器制作 UCP，但我的管理功能文件之一存在问题。

<?php
session_start();

if($_SESSION['admin'] == 0) {
  echo '<script>setTimeout("window.location=\'../index.php\'", 0)</script>';
}

include("../includes/connect.php");

$Charname = $_POST['charname'];
$Username = $_POST['username'];
$Faction = (int)$_POST['faction'];
$Rank = (int)$_POST['rank'];

$query = $mysqli->query("UPDATE characters SET Faction='$Faction', FactionRank='$Rank' WHERE Username='$Username' AND Character='$Charname'");

if($query == false) {
  echo '<div class="error" id="error">Your request cannot be handled at this time.</div>';
} else {
  header("Location: ../changepfac.php");
}

?>

这是我用于表单操作的页面。问题似乎是查询，因为这是我应该得到的输入:

UPDATE characters SET Faction='5', FactionRank='6' WHERE Username='Derek_McFlies' AND Character='Derek_McFlies';

当我在 phpMyAdmin 中执行该命令时，出现以下错误:

#1064 - You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near '='Derek_McFlies'' at line 1 

查询的重点是检查用户名和角色名是否与数据库中的相同，然后用玩家的新派系和派系等级更新它们。

如果有人能帮我解决这个问题，那就太好了!

最诚挚的问候，帕维尔

Answer 1

字符是 reserved keyword 。如果您想用它来命名列标识符，您必须将其括在刻度中:

UPDATE characters SET Faction='5', FactionRank='6' WHERE Username='Derek_McFlies' AND `Character`='Derek_McFlies';