ansaurus

Question

Strange MySQL Issues

Answer 1

+2 A:

You really should be checking for errors in your query. Even something as basic as:

mysql_query($query) or die(mysql_error());

Any time you do a mysql function you should check for errors, or have a method of catching exceptions (if using an applicable interface, since the default mysql functions don't throw exceptions).

It could be messing up on a few points.

Also, as a hint, sprintf works wonderfully if you're writing queries out.

Codeacula 2010-10-01 14:35:27

Thanks for that! I got an error saying to check for valid syntax at line 2, so then I realised that maybe it was the single quote on the top part of the query (before VALUES), So I removed the single quotes. Then, I got another error, same thing: **"You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'Number, Account ID, First Name, Last Name, Date ' at line 2"**

lucifer 2010-10-01 14:44:39

Could it be possible that it's because of the spaces inbetween the Names (i.e. Account ID etc)?

lucifer 2010-10-01 14:46:02

Not to mention the use of invalid identifier quotes (you should use ```)...

ircmaxell 2010-10-01 14:49:36

Problem solved! It WAS the spaces inbetween the Column names. That's so strange because MySQL Query Browser let me use spaces, just like a spreadsheet. Oh well, now I know. Now that it's working, time to make it secure!!! :) Thanks for helping, Codeacula! :-)

lucifer 2010-10-01 14:49:51

You mean, use ` instead of '? :) Thanks, ircmaxell!

lucifer 2010-10-01 14:50:32

The Query Browser will correct it for you, obviously. And use \` instead of ', but I would also make sure to check for ` as part of your SQL sanitizing and handle as desired, since 'mysql_escape_string()' isn't aware of it.

Codeacula 2010-10-01 14:53:01

Do not use `mysql_escape_string`! It's deprecated and doesn't work correctly. Use `mysql_real_escape_string`. And it doesn't matter if it knows about ```, since the result will be put inside of quotes, so it won't be parsed as an identifier token anyway...

ircmaxell 2010-10-01 14:59:35

I was lazy and left out real. My bad.

Codeacula 2010-10-01 15:07:13

Thank you Codeacula :)

lucifer 2010-10-01 15:17:42

Thanks ircmaxell :)

lucifer 2010-10-01 15:18:23

Answer 2

+2 A:

You have an error in your SQL query. You're getting "Account created" because you're not testing for it.

eusto 2010-10-01 14:41:04

I have fixed the problem. Thanks for helping :)

lucifer 2010-10-01 14:51:27

Answer 3

A:

So, I've managed to figure out what was going to, thanks to all your advice :) As it turns out, it wasn't working because I was using spaces inbetween the Column Names (i.e. Account ID should be AccountID). So I just removed spaces from the table columns, and also from the php code.

Thanks all for your help!

lucifer 2010-10-14 16:45:08

ansaurus

tags:

views:

answers:

Strange MySQL Issues

related questions