由于保留关键字,MySQL查询失败？

Question

编辑:如果你是从谷歌来这里,这个问题是因为这个词int在PHP中是一个保留关键字.请参阅已接受答案的结尾.

我还在学习PHP/MySQL,对于我的生活,我无法弄清楚我的代码有什么问题.

我正在尝试从html页面获取一些数据并将其添加到我的数据库中的表中.我正在通过GET请求传递数据,然后使用PHP检索它$_GET.

我已经测试了这个,并且变量被正确传递给PHP脚本,但它们没有出现在数据库中.脚本死在这一行: mysql_query($query) or die('data entry failed');

$database='a9293297_blog';
$con = mysql_connect('mysql2.000webhost.com','my_username','my_password');
mysql_select_db($database,$con) or die('failed to connect to database');

$username = $_GET['username'];
$password = $_GET['password'];
$charName = $_GET['charName'];
$sex = $_GET['sex'];
$class = $_GET['class'];
$race = $_GET['race'];
$str = $_GET['str'];
$sta = $_GET['sta'];
$dex = $_GET['dex'];
$int = $_GET['int'];
$cha = $_GET['cha'];

$query = "INSERT INTO Players (username, password, charName, sex, class, race, str, sta, dex, int, cha)
VALUES ('" . $username . "', '" . $password . "', '" . $charName . "', '" . $sex . "', '" . $class . "', '" . $race . "', '" . $str . "', '" . $sta ."', '" . $dex . "', '" . $int . "', '". $cha . "')";

mysql_query($query) or die('data entry failed'); // Fails here
mysql_close($con);

Answer 1

要更好地了解SQL查询的错误,请使用mysql_error():

mysql_query($query) or die(mysql_error());

使用mysql_real_escape_string()转义字符串变量.例:

$query = "INSERT INTO MYTABLE(MYFIELD) VALUES ('".mysql_real_escape_string($myVar)."');

编辑

int似乎是一个保留的MySQL关键字.用反引号逃脱它:

INSERT INTO Players (username, password, ..., str, sta, dex, `int`, cha) ...