Får en SQL fejl ?
Hey alleFår denne fejl når jeg prøver at uploade en fil:
INSERT INTO files (doc_id, filename, desc) VALUES ('1','Test','archive_icon.gif')You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'desc) VALUES ('1','Test','archive_icon.gif')' at line 1
---------------------------
Min kode:
<? session_start(); ?>
<? include("../includes/cnx.php"); ?>
<? include("../includes/rtrnfuncs.php"); ?>
<?
//Hent variabler
$Doc_ID = $_REQUEST['doc_id'];
?>
<body style="background-color: #f3f3f3;">
<link href="../css/main.css" rel="stylesheet" type="text/css" />
<table width="450" border="0" cellspacing="3" cellpadding="0" style="border:1px solid #e3e3e3;">
<tr>
<td>
<?
$Doc_ID = $_REQUEST['doc_id'];
if($_REQUEST['slet'] == "slet") {
$oldidfiler = mysql_escape_string($_REQUEST['idfiler']);
$SQL = "SELECT * FROM files WHERE idfiles = $oldidfiler";
$mq_oldfil = mysql_query($SQL) or die(mysql_error());
$oldfil_arr = mysql_fetch_assoc($mq_oldfil);
$oldfil = $oldfil_arr['filename'];
unlink("../filer/$oldidfiler/" . $oldfil);
mysql_query("DELETE FROM files WHERE idfiles = $oldidfiler");
}
if($_REQUEST['submit'] == "Tilføj fil") {
if ($_FILES['bilag']['size'] == 0) {
?>
<script language="JavaScript" type="text/javascript">
alert('Du skal vælge en fil!');
</script>
<?
}
elseif ($_REQUEST['beskrivelse'] == "") {
?>
<script language="JavaScript" type="text/javascript">
alert('Du skal lave en beskrivelse');
</script>
<?
} else {
$desc = mysql_escape_string($_REQUEST['beskrivelse']);
$filename = mysql_escape_string($_FILES['bilag']['name']);
$sql = "INSERT INTO files (doc_id, filename, desc) VALUES ('$Doc_ID','$desc','$filename')";
echo $sql;
mysql_query($sql) or die(mysql_error());
$fileid = mysql_insert_id();
if (! file_exists("../filer/$fileid")) {
mkdir("../filer/$fileid");
}
move_uploaded_file($_FILES['bilag']['tmp_name'],"../filer/$fileid/" . $_FILES['bilag']['name']);
}
}
?>
<form enctype="multipart/form-data" action="edit-file.php" method="post">
<input type="hidden" name="doc_id" value="<?=$Doc_ID?>" />
<table cellspacing="4" cellpadding="0" border="0" width=450>
<tr>
<td colspan=2><strong>Eksisterende filer</strong></td>
</tr>
<?
$SQL = "SELECT * FROM files WHERE doc_id = $Doc_ID";
$mq_gf = mysql_query($SQL) or die(mysql_error());
if (mysql_num_rows($mq_gf) > 0) {
?> <tr><td colspan=2><ul>
<?
while ($fil = mysql_fetch_assoc($mq_gf)) {
?>
<li>
<?=$fil['desc']?> (<?=$fil['filename']?>) <a href="edit-file.php?doc_id=<?=$Doc_ID?>&slet=slet&idfiles=<?=$fil['idfiles']?>"><img src="images/delete.gif" alt="Slet" title="Slet" border="0">
</a></li>
<?
}
?>
</ul>
</td>
</tr>
<?
} else {?>
<tr>
<td colspan=2>Ingen</td>
<?
}
?>
<tr>
<td colspan=2 bgcolor="#e3e3e3"></td>
</tr>
<tr>
<td colspan=2><strong>Tilføj ny fil</strong></td>
</tr>
<tr>
<td width="86">
Filnavn: </td>
<td width="242"><input type="file" name="bilag" style="width:300px;" />
</td>
</tr>
<tr>
<td>
Beskrivelse:
</td>
<td><input type="text" name="beskrivelse" style="width:300px;" />
</td>
</tr>
</table>
<input type="submit" name="submit" value="Tilføj fil" />
</form></td>
</tr>
</table>
</body>
