php - Database error. You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax -


i getting error:

an error occured: database error. have error in sql syntax; check manual corresponds mariadb server version right syntax use near '@gmail.com, salt = , iteration = 12, method = blowfish, person_id' @ line 1

here code:

$data_con = new data_abstraction; $data_con->execute_query("insert `user` set `username` = $user, `password` = $phsh, `email` = $email, `salt` = $salt, `iteration` = $new_iteration, `method` = $new_method, `person_id` = $result2, `role_id` = $result4, `skin_id` = $result5");

edit:

i used prepared query, used parameterized statements , bind parameters. error has gone details want inserted table not added.

here code:

if(!($sql = $link->prepare("insert `user` set                                      `username`  = ?,                                      `password`  = ?,                                      `email`     = ?,                                      `salt`      = ?,                                      `iteration` = ?,                                      `method`    = ?,                                      `person_id` = ?,                                      `role_id`   = ?,                                      `skin_id`   = ?"))){                                         echo "sql query preparation has failed";                                     }                      if(!($sql->bind_param("ssssisiii", $user, $phsh, $email, $new_salt, $new_iteration, $new_method, $result2, $result4, $result5))){                         echo "parameter binding failed";                     }                      if(!($sql->execute())){                         echo "mysql query execution has failed";                     }

all text data must wrapped in quotes in concatenated query this. legal wrap integers in quotes safer both this

$data_con = new data_abstraction; $data_con->execute_query("insert `user` set              `username`  = '$user',              `password`  = '$phsh',              `email`     = '$email',              `salt`      = '$salt',              `iteration` = '$new_iteration',              `method`    = '$new_method',              `person_id` = '$result2',              `role_id`   = '$result4',              `skin_id`   = '$result5'");

it better use parameterised query , bind values

$sql = "insert `user` set                  `username`  = ?,                  `password`  = ?,                  `email`     = ?,                  `salt`      = ?,                  `iteration` = ?,                  `method`    = ?,                  `person_id` = ?,                  `role_id`   = ?,                  `skin_id`   = ?");

and prepare query , bind values ? using bind_param

this protect sql injection attack have @ happened little bobby tables if escaping inputs, not safe! use prepared parameterized statements


-

Comments

Post a Comment

Popular posts from this blog

python - How to insert QWidgets in the middle of a Layout? -

Image
i'm using qt framework build graphical user interface. use qgridlayout position qwidgets neatly. gui looks this: my application regularly adds new widgets gui @ runtime. these new widgets not added @ end of qlayout, somewhere in middle. the procedure bit cumbersome. applied on figure above, need take out widg_c , widg_d , ... qgridlayout. next, add widg_x and widg_y , , put other widgets again. how remove widgets qgridlayout: for in reversed(range(mygridlayout.count())): self.itemat(i).widget().setparent(none) ### as long you're dealing small amount of widgets, procedure not disaster. in application display lot of small widgets - perhaps 50 or more! application freezes second while procedure ongoing, annoying user. there way insert widgets somewhere in qlayout, without need take out other widgets? edit: apparently solution qvboxlayout simple. use function insertwidget(..) instead of addwidget(..) . docs can found link: http://doc.qt.io/qt-5/qboxlayou
Read more

python - serve multiple gunicorn django instances under nginx ubuntu -

i need serve 2 webs apps (django) on gunicorn under different domain names using nginx on ubuntu. started using tutorial: https://www.digitalocean.com/community/tutorials/how-to-set-up-django-with-postgres-nginx-and-gunicorn-on-ubuntu-16-04 it worked fine 1 using that. tried same thing second gives me 502 gateway second domain. tried following tutorial: http://michal.karzynski.pl/blog/2013/10/29/serving-multiple-django-applications-with-nginx-gunicorn-supervisor/ i'm @ part run gunicorn start script: sudo bin/gunicorn_start i response: starting webuildblack root traceback (most recent call last): file "/home/devin/webuildblack/bin/gunicorn", line 7, in <module> gunicorn.app.wsgiapp import run importerror: no module named 'gunicorn.app'; 'gunicorn' not package you have named program gunicorn.py gunicorn -package. rename file , remove gunicorn.pyc file.
Read more

module - Prestashop displayPaymentReturn hook url -

i new prestashop developer , trying create paymentmodule. have got show payment method can not proceed purchase because not know hot works. does know should redirect run hooddisplaypaymentreturn method? i happy if explain me complete navigation map make purchase. anyway, can find relation between hooks , pages? when have new module payment rely on simplest provided prestashop: bankwire. inside can find 3 hooks. hookpayment: public function hookpayment($params) { if (!$this->active) return; if (!$this->checkcurrency($params['cart'])) return; $this->smarty->assign(array( 'this_path' => $this->_path, 'this_path_bw' => $this->_path, 'this_path_ssl' => tools::getshopdomainssl(true, true).__ps_base_uri__.'modules/'.$this->name.'/' )); return $this->display(__file__, 'payment.tpl'); } hookdisplaypaymenteu: public fun
Read more