2017-04-24 103 views
-1

我有一個頁面用於爲程序添加新用戶。當點擊創建按鈕時,通過POST將信息發送到我的php腳本來運行某些登錄,加密密碼並使用預準備語句將數據插入到MySQL中。但是,我不斷收到以下錯誤,但不知道爲什麼:MySQL/PHP準備好的語句插入錯誤

準備失敗:(1064)您的SQL語法錯誤;檢查對應於你的MySQL服務器版本的在線使用近「」 1

我的腳本正確的語法手冊:

<?php 

include("inc.php"); 

if ((isset($_POST['firstname'])) and (isset($_POST['lastname'])) and (isset($_POST['company'])) and (isset($_POST['statusflag'])) and (isset($_POST['username'])) and (isset($_POST['password'])) and (isset($_POST['passwordConfirm']))) { 

    $firstname = $_POST['firstname']; 
    $lastname = $_POST['lastname']; 
    $email = $_POST['email']; 
    $phone = $_POST['phone']; 
    $company = $_POST['company']; 
    $department = $_POST['department']; 
    $statusflag = $_POST['statusflag']; 
    $admin = $_POST['admin']; 
    $revoked = $_POST['revoked']; 
    $login = $_POST['username']; 
    $pass = $_POST['password']; 
    $passConfirm = $_POST['passwordConfirm']; 

} else { 

    echo "Values did not save. Please try again."; 
} 



if ($pass == $passConfirm) { 


    $passEnc = password_hash($pass, PASSWORD_DEFAULT); 


    $conn = new mysqli($servername, $username, $password, $dbname); 


    if ($conn->connect_errno) { 
     echo "There was a problem connecting to MySQL: (" . $conn->connect_errno . ") " . $conn->connect_error; 
    } 


    if (!($sql = $conn->prepare("INSERT INTO sched_users(login, password, firstname, lastname, email, phone, company, department, admin, statusflag, revoked) VALUES (?,?,?,?,?,?,?,?,?,?,?"))) { 
     echo "Prepare failed: (" . $conn->errno . ") " . $conn->error; 
    } 


    if (!$sql->bind_param("sssssssiiss", $login, $passEnc, $firstname, $lastname, $email, $phone, $company, $department, $admin, $statusflag, $revoked)) { 
     echo "Binding parameters failed: (" . $sql->errno . ") " . $sql->error; 
    } 


    if (!$sql->execute()) { 
     echo "Execute failed: (" . $sql->errno . ") " . $sql->error; 
    } 


    $sql->close(); 
    $conn->close(); 


} else { 

    echo "Passwords don't match. Please try again."; 
} 

?> 

我的表具有完全相同的列中,除了相同的順序第一列(id)是自動遞增的主鍵。該列不應該包含在插入中,因爲MySQL將在其末尾處理自動增量。

所有幫助表示讚賞。

謝謝!

+6

')'在錯誤的地方/失蹤。 –

+0

@JonStirling他只是想念它。他用括號將他的條件分組。 – Daerik

+0

@Daerik發現和更新的評論:) –

回答

0

第一個錯誤:

if (!($sql = $conn->prepare("INSERT INTO sched_users(login, password, firstname, lastname, email, phone, company, department, admin, statusflag, revoked) VALUES (?,?,?,?,?,?,?,?,?,?,?"))) { 

if檢查決賽:

"))) 

remplace有:

if (!($sql = $conn->prepare("INSERT INTO sched_users(login, password, firstname, lastname, email, phone, company, department, admin, statusflag, revoked) VALUES (?,?,?,?,?,?,?,?,?,?,?)"))) 
+5

這使得它成爲一個錯字,這是一個近距離投票的原因... – Shadow

+1

是的,這是一個錯字。感謝你們! – rdimouro