Question

I ve written a function which updates the mysql database row with some new column data. Here is the function:

function sql($set,$data){
    $sql = mysql_query("UPDATE members SET  ".$set."  =  ".$data."  WHERE login =  ".$_SESSION[ login ]." ");
    if($sql){
        echo  Profile updated. ;
    }
    else{
        echo  Could not update profile. Please try again later. ;
    }
}

这里是方案的一个零碎部分,该方案本应利用这一功能:

$array = array("$password", "$email", "$age");
                        if($array[0] != 0){
                            sql("password",$password);
                        }
                        if($array[1] != 0){
                            sql("email",$email);
                        }
                        if($array[2] != 0){
                            sql("age",$age);
                        }

它没有将价值写给数据库。什么错误? 是否可以引用该功能中的变量?

Answer 1

删除<代码>SET上的单一报价:

function sql($set,$data){
    $sql = mysql_query("UPDATE members SET ".$set." =  ".$data."  WHERE login =  ".$_SESSION[ login ]." ");
    if($sql){
        echo  Profile updated. ;
    }
    else{
        echo  Could not update profile. Please try again later. ;
    }
}

无需引用哥伦名

Working example here -> http://www.sqlize.com/c34I44c37r

Answer 2

这确实是引文。具体来说,它引证了提交名字(姓名、电子邮件、......)。

Just ` instead of

SET `foo' = 酒吧

PS:请确保你在使用<代码>mysql_real_einski_string($data)

友情链接