Здравейте искам да ви попитам нещо странно се случва уж всичко ми е вярно(така си мисля) но
ми изкача грешка
Някой може ли да хвърли едно око на бързо за да види каде точно е проблема ?
ми изкача грешка
Код:
"You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'out,title,info,category,login,question,answer,ip) VALUES ('NULL','Dyrabyra','1111'' at line 1"Някой може ли да хвърли едно око на бързо за да види каде точно е проблема ?
PHP:
function register()
{
$id = "NULL";
$reg_account = secure($_POST['reg_account']);
$reg_password = secure($_POST['reg_password']);
$reg_repassword = secure($_POST['reg_repassword']);
$reg_mail = secure($_POST['reg_mail']);
$reg_question = secure($_POST['reg_question']);
$reg_answer = secure($_POST['reg_answer']);
$reg_code = secure($_POST['reg_code']);
$reg_agree = secure($_POST['reg_agree']);
$reg_time = date('Y-m-d H:i:s');
$ipuser = $_SERVER['REMOTE_ADDR'];
$acc_len = strlen($reg_account);
$pass_len = strlen($reg_password);
$ques_len = strlen($reg_question);
$answ_len = strlen($reg_answer);
$data = date('Y-m-d');
$ip = $_SERVER['REMOTE_ADDR'];
$website = secure($_POST['reg_website']);
$banner = secure($_POST['reg_title']);
$title = secure($_POST['reg_banner']);
$info = secure($_POST['reg_info']);
$cate = secure($_POST['reg_cat']);
$selectcategory = mysql_query("SELECT * FROM category WHERE category='$cate'");
$slectcat = mysql_fetch_assoc($selectcategory);
$category = $slectcat[0];
check_inject();
$exists_accq = mysql_query("Select * from user where account='$reg_account'");
$exists_acc = mysql_num_rows($exists_accq);
$exists_mailq = mysql_query("Select * from user where email='$reg_mail'");
$exists_mail = mysql_num_rows($exists_mailq);
if(empty($reg_account) or empty($reg_password) or empty($reg_repassword) or empty($reg_mail) or empty($reg_question) or empty($reg_answer) or empty($reg_code)) { echo"<tr><td align='center' class='modules'><b>Error:</b> You can not leave empty fields !</td></tr>"; $error=1; }
else{
if($acc_len < 4) { echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> Account must be at least 4 symbols !</span></td></tr>"; $error=1; }
elseif($exists_acc != 0) { echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> Another member has already registered with this account !</span></td></tr>"; $error=1; }
if($pass_len < 4) { echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> Password must be at least 4 symbols !</span></td></tr>"; $error=1; }
elseif($reg_password != $reg_repassword) { echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> Passwords did not match !</span></td></tr>"; $error=1; }
if(!eregi("^[_\.0-9a-z-]+@([0-9a-z][0-9a-z-]+\.)+[a-z]{2,6}$",$reg_mail) && count($_POST)>0 && count($reg_mail)<60) { echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> Invalid email address! Only 0-9 a-z and @ and . and _ and - !</span></td></tr>"; $error=1; }
elseif($exists_mail != 0) { echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> Another member has already registered with this email !</span></td></tr>"; $error=1; }
if($ques_len < 4) { echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> Question must be at least 4 symbols !</span></td></tr>"; $error=1; }
if($answ_len < 4) { echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> Answer must be at least 4 symbols !</span></td></tr>"; $error=1; }
if(md5($reg_code) != $_SESSION['random_value']) { echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> Please go back and write the code correctly !</span></td></tr>"; $error=1; }
if($reg_agree != agree) { echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> You must agree with the terms !</span></td></tr>"; $error=1; }
if($website == '' || $website == 'http://'){ echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> You website is empty.Try again.</span></td></tr>"; $error=1; }
if($title == ''){ echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> You website title is empty.Try again.</span></td></tr>"; $error=1; }
if($info == ''){ echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> You website description is empty.Try again.</span></td></tr>"; $error=1; }
if($cate == '' || $cate == 'Select Category'){ echo"<tr><td align='center' class='modules'><span class='offline'><b>Error:</b> Please select category.</span></td></tr>"; $error=1; }
if($error != 1) {
echo"<tr><td align='center' class='modules'><span class='online'>Account $reg_account successfuly created on $reg_time !</span></td></tr>";
$a = mysql_query("INSERT INTO user (id,account,password,email,data,website,banner,status,inc,out,title,info,category,login,question,answer,ip) VALUES ('$id','$reg_account','$reg_password','$reg_mail','$data','$website','$banner','1','0','0','$title','$info','$category','0','$reg_question','$reg_answer','$ip')") or die (mysql_error());
}}}
