mysql - 此查询中的错误是什么。帮助赞赏

Question

$sql = "SELECT * FROM ".$SETTINGS["USERS"]."'WHERE email =$email'".mysqli_real_escape_string($_POST['email'])."'AND password = $pw'".mysqli_real_escape_string($_POST['password'])."'";          

标签： mysql

Answer 1

我认为您的查询将是，

$sql = "SELECT * FROM ".$SETTINGS["USERS"]." WHERE email = '".mysqli_real_escape_string($email, $_POST['email'])."' AND password = '". mysqli_real_escape_string($pwd,$_POST['password'])."'";