Sql错误,字段列表中有未知列


Sql error Unknown column in field list

我正在从sql数据库生成问题。我试着用问题id保存每个答案。

我得到这个错误:"错误:未知列'answer_text'在'字段列表'"怎么来的?

 //save text input to sql with question id and question answer
 $question_id = mysqli_real_escape_string($con, $_POST['question_id']);
 foreach ($_POST['answer_text'] as $question_id => $answer_id){
        $sql="INSERT INTO answers (question_id, answer_text)
                VALUES ({$question_id}, {$answer_id})";
echo $sql;
                  if (!mysqli_query($con,$sql)) {
                    die('Error: ' . mysqli_error($con));
}
  }
 mysqli_close($con);
// generate question from database
if ($result) {
while($row = mysqli_fetch_array($result, MYSQLI_ASSOC)) {
    $body = $row['question_body'];
    $question_id = $row['question_id'];
    echo '<div class="questions-4">';
    echo '  
        <tr>
                <td>'.$body.'</td>
                <td><input type="text" name="answerswer_text['.$question_id.']" </td><br>
         </tr>';
         echo '</div>';

您容易受到SQL注入攻击,并且没有引用您在查询中使用的值。生成的内容相当于:

INSERT ... VALUES(foo, bar)
不是

INSERT ... VALUES('foo', 'bar');

要解决当前的问题,至少应该有

VALUES ('{$question_id}', '{$answer_id}')";
        ^--------------^--^------------^--- these

这就解决了:

        $sql="INSERT INTO answers (question_id, answer_value)
                VALUES ({$question_id}, '$answer_id')";