输入Cant Submitted您的SQL语法有错误;请查看MariaDB服务器版本对应的手册，以获得正确的语法

Question

错误：输入Cant Submitted您的SQL语法有错误；查看MariaDB服务器版本对应的手册，了解在"图像"附近使用的正确语法)VALUES("Nakshatra"、"Neema"、"[e-mail]'，'07746884…'在第1行

代码：

<?php
global $conn;

if (isset($_POST['submit'])) 
{

if (isset($_POST['FNAME']) && isset($_POST['LNAME']) && isset($_POST['MAIL']) && isset($_POST['MNUM']))
{
$errors = array();
if(isset($_FILES['IMAGE']) && $_FILES['IMAGE']['error'] == 0)
{

$servername = "localhost";
$username = "root";
$password = "";
$database = "data1";
$conn = mysqli_connect($servername, $username, $password, $database);
if(!$conn)
{
die('Connection did not Established');
}
$FirstName = $_POST['FNAME'];
$LastName = $_POST['LNAME'];
$Email = $_POST['MAIL'];
$MobileNumber = $_POST['MNUM'];
$file_name = time() . '_' . $_FILES['IMAGE']['name'];
$file_size = $_FILES['IMAGE']['size'];
$file_tmp = $_FILES['IMAGE']['tmp_name'];
$file_type = $_FILES['IMAGE']['type'];
$file_ext = pathinfo($file_name, PATHINFO_EXTENSION);
$extensions = array("jpeg", "jpg", "png", "gif");


if (in_array($file_ext, $extensions) === false) 
{
$errors[] = "Extension not allowed, please choose a JPEG or PNG file.";
}
if ($file_size > 50000)
{
$errors[] = 'File size must be excately 50KB';
}
if (empty($errors) == true)
{

move_uploaded_file($file_tmp, "uploads/" . $file_name);
$sql = "INSERT INTO `new` (`FirstName`, `LastName`, `Email`, `MobileNumber`,'Image') VALUES ('$FirstName', '$LastName', '$Email', '$MobileNumber','$file_name')";
$result = $conn->query($sql);
if($result)
{
echo "Entry is Successfully Submitted";
}
else
{
echo "Entry Cant Submitted".mysqli_error($conn);
}
}
else
{
print_r($errors);
}
}
}
else
{
echo "All Field are Required";
die();
}
}
else
{
echo "Submit button is not set";
}
?>

Answer 1

突然你离开了backticks，改变这个：

$sql = "INSERT INTO `new` (`FirstName`, `LastName`, `Email`, `MobileNumber`,'Image') VALUES ('$FirstName', '$LastName', '$Email', '$MobileNumber','$file_name')";

对此：

$sql = "INSERT INTO `new` (`FirstName`, `LastName`, `Email`, `MobileNumber`,`Image`) VALUES ('$FirstName', '$LastName', '$Email', '$MobileNumber','$file_name')";

请注意Image附近的倒勾号。

此外，你应该提高你的提问技巧，检查这个链接，看看我的意思。您的代码对SQL注入是完全开放的，请在此处查看准备好的语句。