循环事件检查中的SQL错误 - SQL error in recurring event check

SQL error in recurring event check

本文关键字：SQL 错误事件检查循环 | 更新日期: 2023-09-26

我正在制作一个循环事件系统，并且必须硬编码检查，以查看事件是否已通过以创建新事件。(不，我不能做cron作业，因为系统基础是Windows，不，我没有访问任务调度程序的权限。)

这是我到目前为止的代码:

<?php
require('common.php');
$query = "SELECT 
             *
          FROM 
             DD_events
      ";
try{
$stmt = $db->prepare($query);
$result = $stmt->execute();
}
catch(PDOException $ex){
die("Failed to run query: " . $ex->getMessage());
}
$chk = $stmt->fetchall();
//print_r($chk);
foreach ($chk as $chks) {
if (time() > $chks['event_date']) {
//Add 1 day to event time
$time = strtotime($chks['event_date']);
$newTime = $time + 86400; // 24 * 60 * 60
// Create query to make the next event
    $query = "INSERT INTO
            DD_events (event_name, event_date, initiator, min_lvl, max_level)
              VALUES 
            ({$chks['event_name']}, {$newTime}, 0, {$chks['min_lvl']}, {$chks['max_level']})
      ";
    try
    {
        // These two statements run the query against your database table.
        $stmt = $db->prepare($query);
        $stmt->execute();
    }
    catch(PDOException $ex)
    {
        // Note: On a production website, you should not output $ex->getMessage().
        // It may provide an attacker with helpful information about your code. 
        die("Failed to run query: " . $ex->getMessage());
    }
}
}

返回以下错误:

Failed to run query: SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ' 200)' at line 4

有谁能发现我犯的错误吗?因为我已经看了30分钟了，但还是看不见。

您需要引用变量，但这会使您的查询容易受到sql注入的攻击，因此正确的解决方案是使用绑定变量:

$query = "INSERT INTO
        DD_events (event_name, event_date, initiator, min_lvl, max_level)
          VALUES 
        (:event_name, :event_date, 0, :min_lvl, :max_level)
  ";
try
{
    // These two statements run the query against your database table.
    $stmt = $db->prepare($query);
    $stmt->execute(array(':event_name' => $chks['event_name'],
                         ':event_date' => $newTime,
                         ':min_lvl' => $chks['min_lvl'],
                         ':max_level' => $chks['max_level']));
}

也许还有一种更简单的方法:

INSERT INTO DD_events
(event_name, event_date, initiator, min_lvl, max_level)
SELECT event_name, DATE_ADD(event_date, INTERVAL 1 DAY), 0, min_lvl, max_lvl
FROM DD_events

这将在一天后为每个现有事件创建一个新事件(这是您所说的代码应该做的)，并且基本上消除了整个脚本

的需要

假设event_name是VARCHAR，则需要将{$chks['event_name']}替换为'{$chks['event_name']}'。根据数据类型的不同，对于event_date

也可能成立。