Php html表单中的sql update语句不'；不执行

普里斯：

---

在更新的where之前有一个不应该存在的。试着像这样激活错误报告：这样你就知道为什么事情会失败

你的

更新查询中有一个逗号，它不应该在那里（就在
WHERE
子句之前）。此外，您应该考虑使用准备好的状态，我可以使用什么而不是准备语句？别问我你能用什么来代替。这是你已经做过的。这是一种坏习惯。适合sql注入例如，我将
更新
在一个单独的文件中，可能使用
AJAX
<?php

//include 'includes/connectie.php';
if (isset($_GET['id'])){
$product_id=$_GET['id'];
       } else {
$product_id=$_POST['id'];
       }


$user = 'userID';
$pass = 'mypassword';
$dbh = new PDO( 'mysql:host=localhost;dbname=webshop', $user, $pass );


    $sql = "SELECT * FROM  `producten` WHERE product_id='$product_id'";
    $sql_result = $dbh->query($sql);

    foreach($sql_result as $row)
        {   
            $prijs=$row['prijs'];
            $product_naam=$row['product_naam'];
            $product_categorie=$row['product_categorie'];
            $product_specificaties=$row['product_specificaties'];
            $foto=$row['foto'];
            $product_id=$row['product_id']; 
            $product_soort=$row['product_soort'];


            echo "Product id nummer:", $product_id;

        }

//$_SESSION['prijs'] = $prijs;




if ($_SERVER["REQUEST_METHOD"] == "POST"){

//if (!empty($product_naam) && !empty($product_specifcaties) && !empty($product_categorie) && !empty($prijs)
//&& !empty($product_soort))
If (isset($_POST['submit'])) 
 {

    $sql = "UPDATE producten 
    SET prijs='$prijs', product_naam='$product_naam', product_specificaties='$product_specificaties',
    product_categorie='$product_categorie', product_soort='$product_soort',
    WHERE product_id='$product_id'";

    $query = $dbh->prepare( $sql );
    $result = $query->execute();
    if ($result){
        echo "Product aangepast!!!!! in id:";
        echo $product_id;
        } else {
        echo "Product NIET aangepast!!!!";
            }

  }



}


?>

<form name="admin" action="producten_echt_aanpassen.php" method="POST" enctype="multipart/form-data">

     <p>
         <label for 'product_id'>Product ID: </label><br>
             <input type="text" name="id" value="<?php print $product_id; ?>"/>
    </p>
    <p>
        <label for 'product_naam'>Naam: </label><br>
        <input type="text" name="product_naam" value="<?php print $product_naam; ?>"/>
    </p>
    <p>     <label for 'product_specificaties'>Specificaties: </label><br>
        <textarea rows= "4" cols="50" name="product_specificaties"><?php print $product_specificaties; ?>
        </textarea>
    </p>
    <p>
        <label for 'prijs'>Prijs: </label><br>
        <input type="text" name="prijs" value="<?php print $prijs; ?>"/>
    </p>
    <p>
        <label for 'product_categorie'>Iphone: </label><br>
        <input type="text" name="product_categorie" value="<?php print $product_categorie; ?>"/>
    </p>
    <p>
        <label for 'product_soort'>Soort: </label><br>
        <input type="text" name="product_soort" value="<?php print $product_soort; ?>"/>
    </p>
      <br/>
        <label for 'uploadfile'>Kies foto <img src="<?php print $foto; ?>"></label><br>
        <input type="file" name="file" ><br><br>


        <input type="submit" name="submit" value="Submit">

</form>