SQL语法有什么错误

Question

这个错误是什么意思：

您的 SQL 语法有错误；检查与您的 MySQL 服务器版本相对应的手册，以获取正确的语法以使用 near times new roman；字体大小：x-large；颜色：#a67859;> 在第 1 行

查询

 update page set en_title = 'Team', 
  en_content = ' Jasmine Low Sales & Marketing Manager (Singapore) ', image_1 = 'Shirley.jpg',

image_2 = 'Jessica.jpg', keyword = 'test', description = '' where id_page = '3'

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'times new roman'; font-size: x-large;">Cheryl Koh

Answer 1

您的查询：

update page
set en_title = 'Team',
    en_content = ' Jasmine Low Sales & Marketing Manager (Singapore) ',
    image_1 = 'Shirley.jpg',
    image_2 = 'Jessica.jpg',
    keyword = 'test',
    description = ''
where id_page = '3'

是正确的，但您的 SQL 脚本或您运行 SQL 脚本的方式包含错误。

如果您的错误来自包含短语“'times new roman'; font-size: x-large;”的 en_content那么你最好使用prepared statement 而不是将任意字符串与你的 SQL 连接起来（这可能会导致 SQL 注入）。

PREPARE stmt1 FROM 'update page
set en_title = ?,
    en_content = ?,
    image_1 = ?,
    image_2 = ?,
    keyword = ?,
    description = ?
where id_page = ?';

set @en_title = 'Team';
set @en_content = ' Jasmine Low Sales & Marketing Manager (Singapore) ';
set @image_1 = 'Shirley.jpg';
set @image_2 = 'Jessica.jpg';
set @keyword = 'test';
set @description = '';
set @id_page = '3';

EXECUTE stmt1 USING @en_title, @en_content, @image_1, @image_2, @keyword, @description, @id_page;