php - An error in SQL syntax -


the purpose of code extract data csv file , upload db.

i can extract attributes each line file keeps showing error on sql query.

here php file:

<? $row = 1; $server="xxxxx"; $user="xxxx"; $password="xxxx"; $db="xxxx"; mysql_connect($server,$user,$password) or die('erreur au serveur'); mysql_select_db($db) or die('erreur db'); if (($handle = fopen('xxxx/articles.csv','r+')) !== false) { while (($data = fgetcsv($handle,";")) !== false) {     $num = count($data);     //echo "<p> $num champs à la ligne $row: <br /></p>\n";     $row++;     ($c=0; $c < $num; $c++) {         echo $data[$c] . "<br />\n";         $produit =$data[$c];         $att = explode(";", $produit);  $prod = $att[0]; echo 'id = '.$prod .'<br/>';  $code = $att[1];  echo 'code = '.$code.'<br/>';  $nom = $att[2]; echo 'nom = '.$nom.'<br/>';  $cat = $att[3]; echo 'categorie = '.$cat.'<br/>';  $prix = $att[4]; echo 'prix = '.$prix.'<br/>';  $cond = $att[5]; echo 'cond = '.$cond.'<br/>';  $date = $att[6]; echo 'date = '.$date.'<br/>';  $qtes = $att[7]; echo 'qtes = '.$qtes.'<br/>';  $photo = $att[8]; echo 'photo = '.$photo.'<br/>';  $qte = $att[9];  echo 'qte = '.$qte.'<br/>';  $cam = $att[10]; echo 'camion = '.$cam;  $sql = 'update produit set code_barre ='.$code.',nom_prod ='.$nom.', photo ='.$photo.',categorie='.$cat.',condition ='.$cond.',prix_uniraire ='.$prix.', date_exp='.$date.' ,qte ='.$qte.',qte_stock ='.$qtes.', id_camion= '.$cam.' id_prod ='.$prod.'';  $res = mysql_query($sql) or trigger_error(mysql_error()." in ".$sql);          $row++;     } } fclose($handle); } ?>

this :

notice: have error in sql syntax; check manual that
corresponds mysql server version right syntax use near 'condition =emballés,prix_uniraire =3450, date_exp=04/02/2016 ,qte =200,qte_stock' @ line 1 in update produit set code_barre =345123,nom_prod =nutella, photo =www.google.com,categorie=chocolat,condition =emballés,prix_uniraire =3450, date_exp=04/02/2016 ,qte =200,qte_stock =2100, id_camion= 2 id_prod =3 in /home/a2258793/public_html/seekarticles.php on line 34

pay attention start of problem, mysql telling problem starts:
(sidenote: , comments section under question, they're important).

 right syntax use near 'condition                                    ^ problem starts here

"condition" mysql reserved word , requires special attention.

either wrap column name in ticks, or rename word, "conditions" in plural form. isn't mysql reserved word.

`condition` ='.$cond.'
  • should above fail, because of quoting method. consult suggestion below.

you could/should rewrite line to: (and using different quoting method), since values contains strings. rest, mysql take care of integers.

$sql = "update produit set code_barre ='".$code."',  nom_prod ='".$nom."', photo ='".$photo."',categorie='".$cat."',  `condition` ='".$cond."',prix_uniraire ='".$prix."',  date_exp='".$date."' ,qte ='".$qte."',  qte_stock ='".$qtes."', id_camion= '".$cam."'  id_prod ='".$prod."' ";

nota: string values need quoted. can modify needed.

i.e.: where id_prod = $prod"; if $prod integer including column(s).

sidenote:

your present code open sql injection. use mysqli prepared statements, or pdo prepared statements, they're safer.

footnotes:

  • if should encounter other errors, need escape values using mysql_real_escape_string().

  • mysql complain apostrophes etc. i.e.: nutella's best! , interpret 'nutella's best!' in values causing syntax error. whereas escaping data interpret 'nutella\'s best!' rendering valid, since escaped.


Comments

Post a Comment

Popular posts from this blog

c++ - Difference between pre and post decrement in recursive function argument -

i have following sample code used pre-decrement void function(int c) { if(c == 0) { return; } else { cout << "dp" << c << endl; function(--c); cout << c << endl; return; } } this function give output input 4 : dp3 dp2 dp1 dp0 0 1 2 3 but when use post decrement void function(int c) { if(c == 0) { return; } else { cout << "dp" << c << endl; function(c--); cout << c << endl; return; } } output goes in infinite loop dp4 can explain me in detail why happens ? this happens because function(c--) called same value of c , when finishes c decremented. recursively called, hence called same value no chance of return , hit stack overflow error. assume this, int x = 1, y = 0; y = x++ result y == 1 , x == 2. if y = ++x , bot x , y 2.
Read more

php - Nothing but 'run(); ' when browsing to my local project, how do I fix this? -

i added new project. made mistake in projectname.conf file in sites-available apache2, led me reinstalling apache2. after reinstalling , re-enabling projects on every page of every project .. <body> run(); </body> .. i've run composer update, restarted service, restarted pc, checked config files, tried disabling new project. there nothing in error log, , access.log: 127.0.0.1 - - [15/may/2015:01:40:47 +0200] "get / http/1.1" 304 181 "-" "mozilla/5.0 (x11; ubuntu; linux x86_64; rv:38.0) gecko/20100101 firefox/38.0" maybe i'm forgetting apache2 reinstall? don't think did different last time installed it. looks haven't setup php correctly. take @ this great guide , maybe you're forgetting link php config apache2.
Read more

php - How can I echo out this array? -

i don't know how go grabbing data in variable , put foreach loop. class tree{ private $info = array( array('name'=>'jim','state'=>'nu','company'=>'nu','phone'=>array('cell'=>'5615111111','office'=>'5611111111'),'email'=>array('primary'=>'exs@example.com','ex@there.com')), array('name'=>'joe smith','city'=>'phoenix','phone'=>'4805551111','email'=>'jsmith@some_email.com'), array('name'=>'john doe','city'=>'chandler','company'=>'doe co.','email'=>array('jdoe@gmail.com','personal'=>'email@email.com'),'phone'=>'6025550002') ); } if you're inside of class, can access private variable using $this->variablename . example, i...
Read more