php - POST 查询错误

Question

在我说别的之前，我知道我的代码一团糟而且非常糟糕。

好吧，由于某种原因，当我提交表单时一切正常，但它给了我这个错误，但我根本不知道为什么。

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'WHERE username = 'Nick'' at line 1

这是我的代码

if (isset($_POST['slot1']))
{
    $token = mysql_real_escape_string($_POST['token']);
    $tokenn = strip_tags($token);
    $sql55 = "SELECT * FROM user_pokemon WHERE

    belongsto = '".$_SESSION['username']."' AND (id='".$tokenn."')";
    $result55 = mysql_query($sql55) or die(mysql_error());
    $poke55 = mysql_fetch_array($result55);
    $_SESSION['idpoke5'] = $poke55['id'];

    $sql23 = "SELECT * FROM pokemon WHERE name='".$poke55['pokemon']."'";
    $result23 = mysql_query($sql23) or die(mysql_error());
    $battle_get23 = mysql_fetch_array($result23);

    $result666 = mysql_query("UPDATE users SET ep=ep+".$battle_get23['ep']." WHERE username = '".$_SESSION['username']."'")
        or die(mysql_error());

    $result5done = mysql_query("DELETE FROM user_pokemon WHERE id = '".$_SESSION['idpoke5']."'")
        or die(mysql_error());
}

它应该几乎可以用口袋妖怪来交换积分，它做得很好。但后来由于某种原因我收到了错误。

任何帮助将不胜感激，谢谢。

Answer 1

试试这个

   $username = mysql_real_escape_string($_SESSION['username']);
   $batleget = $battle_get23['ep'];
   $result666 = mysql_query("UPDATE users SET ep=ep+CAST($batleget AS UNSIGNED) 
                             WHERE username = '".$username."' ")

或者这个

   $username = mysql_real_escape_string($_SESSION['username']);
   $batleget = $battle_get23['ep'];
   $result666 = mysql_query("UPDATE users SET ep=ep+ $batleget 
                             WHERE username = '".$username."' ")