PHP插入命令不起作用

Question

Hi guys can you please tell me if there is an error on this code. this is not working. it didn't add any on my database. thanks you!

$con = mysql_connect("localhost","root","pass");
if (!$con){
die("Can not connect: " . mysql_error());
}
mysql_select_db("mytable",$con);



if(isset($_POST['add'])){

// Variables

$acc_class = $_POST['acc_class'];

$AddQuery = "INSERT INTO mytable ('acc_class') VALUES ('$acc_class')";  

mysql_query($AddQuery, $con);

echo "Record Successfully Added!!";
};


mysql_close($con);

?>
<form action="add.php" method="post">

Account Classification:
<input  required="required" placeholder="e.g Hotel, Restaurant" type="text" name='acc_class' size=15 />

<input type="submit" name='add' Value='&nbsp;Add Record&nbsp;'/>
</form>

Answer 1

The column name(s) should be wrapped in backticks and not quotes

$AddQuery = "INSERT INTO mytable (`acc_class`) VALUES ('$acc_class')";

or remove the quotes

$AddQuery = "INSERT INTO mytable (acc_class) VALUES ('$acc_class')";

I suggest you move to mysqli_* functions with prepared statements or PDO.

and that you change $acc_class = $_POST['acc_class']; to

$acc_class = mysql_real_escape_string($_POST['acc_class']);

for the time being.

mysql_* functions are deprecated and will be removed from future PHP releases.