1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 | <?php defined ( 'main' ) or die ( 'no direct access' ); defined ( 'admin' ) or die ( 'only admin access' ); $design = new design ( 'Admins Area' , 'Admins Area' , 2 ); $design ->header(); $um = '' ; if (isset( $_REQUEST [ 'um' ])) { $um = $_REQUEST [ 'um' ]; } if (! empty ( $_POST [ 'sub' ])) { $name = escape( $_POST [ 'name' ], 'string' ); $alter = escape( $_POST [ 'alter' ], 'string' ); $position = escape( $_POST [ 'position' ], 'string' ); $power = escape( $_POST [ 'power' ], 'string' ); $wert = escape( $_POST [ 'wert' ], 'string' ); $lang = escape( $_POST [ 'lang' ], 'string' ); if ( empty ( $_POST [ 'sid' ]) ) { db_query( 'INSERT INTO `prefix_footballplayers` (name,alter,position,power,wert,lang) VALUES ( "' . $name . '","' . $alter . '","' . $position . '"' . $power . '"' . $wert . '"' . $lang . '" ) ' ); } else { $sid = escape( $_POST [ 'sid' ], 'integer' ); db_query( 'UPDATE `prefix_footballplayers` SET name = "' . $name . '", alter = "' . $alter . '", position = "' . $position . '", power = "' . $power . '", wert = "' . $wert . '", lang = "' . $lang . '" WHERE id = "' . $sid . '"' ); } } if (! empty ( $_GET [ 'delete' ]) ) { $delete = escape( $_GET [ 'delete' ], 'integer' ); db_query( 'DELETE FROM `prefix_footballplayers` WHERE id = "' . $delete . '" LIMIT 1' ); } if ( empty ( $_GET [ 'sid' ]) ) { $row = array (); $row [ 'sub' ] = 'Eintragen' ; $row [ 'name' ] = '' ; $row [ 'alter' ] = '' ; $row [ 'position' ] = '' ; $row [ 'power' ] = '' ; $row [ 'wert' ] = '' ; $row [ 'lang' ] = '' ; $row [ 'sid' ] = '' ; } else { $abf = 'SELECT name,alter,position,power,wert,lang,id as sid FROM `prefix_footballplayers` WHERE id = "' .escape( $_GET [ 'sid' ], 'integer' ). '"' ; $erg = db_query( $abf ); $row = db_fetch_assoc( $erg ); $row [ 'sub' ] = 'Ändern' ; } $clas = '' ; $tpl = new tpl ( 'footballplayershow' , 1); $tpl ->set_ar_out( $row ,0); $erg = db_query( 'SELECT * FROM `prefix_footballplayers` ORDER BY name' ); while ( $row = db_fetch_assoc( $erg ) ) { $clas = ( $clas == 'Cmite' ? 'Cnorm' : 'Cmite' ); $row [ 'class' ] = $clas ; $tpl ->set_ar_out( $row ,1); } $tpl ->out(2); $design ->footer(); ?> |
EDIT: nun wird mir dieser fehler ausgespuckt ...
MySQL Error:
1064 : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'alter,position,power,wert,lang) VALUES ( "fdsfdas","sfsdfs","sdfsdf","dfsf","sgd' at line 1
in Query:
INSERT INTO `ic1_footballplayers` (name,alter,position,power,wert,lang) VALUES ( "fdsfdas","sfsdfs","sdfsdf","dfsf","sgdsfs","fsdfgsd" )
Debug backtrace:
@ mysql.php:46 -- debug_bt()
@ mysql.php:64 -- db_check_error(...)
@ footballplayershow.php:18 -- db_query(...)
@ admin.php:20 -- require_once(...)
Zuletzt modifiziert von Nex4T am 11.08.2014 - 20:03:29