Question

This question already has answers here:

Closed 11 years ago.

Possible Duplicate:
Can a number used to name a sql column

我试图说明这一法典有什么错误。

$query = "UPDATE $table SET $_GET[qty] =$_GET[newprice] WHERE id = 1 ";

这是按月份计算的。 - UPDATE 零售:12x18 SET 25 =100 WHEREid = 1

页: 1

我已经用了一切办法,并且必须加以利用,总是发出同样的错误信息。

“entergraph

Answer 1

参照你的外地名称使用背书:

UPDATE table SET `25` =  {thevalue} , `100` =  {thevalue} , `200` =  {thevalue}  WHERE wherefield =  {wherevalue}

See here (look for backrite/code> page: http://dev.mysql.com/doc/refman/5.0/en/identifiers.html。

Answer 2

如果看不出表格的定义,则很难肯定,但:

页: 1 例如:

• 美元

试图在不使用报价的情况下确定“类型”栏的价值。如果“类型”一栏像var类,就会失败。

页: 1

[3] It really must be said that the main thing that s wrong with your code is that you are putting un-escaped $_GET values into your SQL query. Anyone could mount an SQL injection attack by putting SQL into the URL of the page. Very bad practice.

友情链接