php - SQLSTATE[42000] SELECT 中的违规 1064

Question

早上好

我的代码明显有问题

这里是:

<fieldset>
 <?
 if(isset($_POST['requete']) && $_POST['requete'] != NULL){
  include "connexion.inc";
  $reponse = $bdd->query('SELECT id_piece, piece 
  FROM tbl_piece 
  WHERE piece = '.$requete.' ');
  while($donnees = $reponse->fetch()){
   echo $donnees['id_piece'];
  }
 }
 else{
  echo $requete;
 }
 ?>         
 <form method="post" action="standard.php">
 <input type="text" name="requete">
 <input type="submit" value="Rechercher">
 </form>
 </fieldset>

当我在网页的文本框中输入诸如“TL081 ”之类的内容时，然后进行验证

我遇到这个错误:

Fatal error: Uncaught exception 'PDOException' with message 'SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1' in /home/libtronic/www/html/standard.php:48 Stack trace: #0 /home/libtronic/www/html/standard.php(48): PDO->query('SELECT id_piece...') #1 {main} thrown in /home/libtronic/www/html/standard.php on line 48

经过一番搜索，我的问题来自于这个 => '.$requete.' 我尝试输入.$requete.或 '".$requete."' 或其他但不起作用

有人可以帮助我吗？

Answer 1

尝试更换线路

$reponse = $bdd->query('SELECT id_piece, piece 
FROM tbl_piece 
  WHERE piece = '.$requete.' ');

与

$reponse = $bdd->query("SELECT id_piece, piece 
  FROM tbl_piece 
  WHERE piece = '".$requete."'");