Fehler in der SQL-Syntax (zitiert ??? !!!)

Question

Kann mir jemand helfen, diese

<?php 
$file_name = basename(__FILE__,'.php'); 
include("conf.php"); 
include("XMLSoccer.php"); 

$years = 1; ///<-------NUMBER OF YEARS TO GO BACK 
$leagueretrive = 3; ///<--------THE LEAGUE ID TO RETRIEVE DATA FOR 

$date1 = date('y', strtotime("-$years years")); 
$date2 = date("y"); 
//CHECKING IF TABLE EXIST IF NOT CREATE NEW 
$table = $file_name; 
$query = "SELECT ID FROM " . $table; 
$resultat = mysqli_query($conn,$query); 


if(empty($resultat)) { 
    echo "<p>" . $table . " table does not exist</p>"; 
    $query = mysqli_query($conn,"CREATE TABLE IF NOT EXISTS $file_name (
     Id int NOT NULL PRIMARY KEY, 
     HomeGoalDetails varchar(800) NOT NULL, 
    )CHARACTER SET utf8 COLLATE utf8_general_ci"); 
} 
else { 
    echo "<p>" . $table . "table exists</p>"; 
} // else 

/////GETING THE DATA FROM SERVICE 

try { 
    $soccer = new XMLSoccer($api_key); 
    $soccer->setServiceUrl("http://www.xmlsoccer.com/FootballDataDemo.asmx"); 
    $results = $soccer->GetHistoricMatchesByLeagueAndSeason(array("league"=>$leagueretrive,"seasonDateString"=>"$date1$date2")); 
    print_r($results); 
} catch (XMLSoccerException $e) { 
    echo "XMLSoccerException: " . $e->getMessage(); 
} 
foreach ($results->Match as $team) { 
    $id = $team->Id; 
    $homeGoalDetails = $team->HomeGoalDetails; 

///INSERTING DATA INTO THE TABLE 
    $sql = "INSERT INTO $file_name (HomeGoalDetails) 
VALUES ('$homeGoalDetails') 
on duplicate key update HomeGoalDetails='$homeGoalDetails'"; 
} 
    if ($conn->query($sql) === TRUE) { 
     echo "New record created successfully"; 
    } else { 
     echo "Error: " . $sql . "<br>" . $conn->error; 
    } 
$conn->close(); 
?> 

Die Antwort zu debuggen, was ich bekommen

Error: INSERT INTO testing2 (HomeGoalDetails) VALUES ('35': Stefan Johansen;4': penalty Leigh Griffiths;') on duplicate key update HomeGoalDetails='35': Stefan Johansen;4': penalty Leigh Griffiths;' You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near ': Stefan Johansen;4': penalty Leigh Griffiths;') on duplicate key update HomeGo' at line 2 Process finished with exit code 0

Answer 1

Sie unescaped zitiert haben in Ihrer Anfrage.

Versuchen:

<?php 
$file_name = basename(__FILE__,'.php'); 
include("conf.php"); 
include("XMLSoccer.php"); 

$years = 1; ///<-------NUMBER OF YEARS TO GO BACK 
$leagueretrive = 3; ///<--------THE LEAGUE ID TO RETRIEVE DATA FOR 

$date1 = date('y', strtotime("-$years years")); 
$date2 = date("y"); 
//CHECKING IF TABLE EXIST IF NOT CREATE NEW 
$table = $file_name; 
$query = "SELECT ID FROM " . $table; 
$resultat = mysqli_query($conn,$query); 


if(empty($resultat)) { 
    echo "<p>" . $table . " table does not exist</p>"; 
    $query = mysqli_query($conn,"CREATE TABLE IF NOT EXISTS $file_name (
     Id int NOT NULL PRIMARY KEY, 
     HomeGoalDetails varchar(800) NOT NULL, 
    )CHARACTER SET utf8 COLLATE utf8_general_ci"); 
} 
else { 
    echo "<p>" . $table . "table exists</p>"; 
} // else 

/////GETING THE DATA FROM SERVICE 

try { 
    $soccer = new XMLSoccer($api_key); 
    $soccer->setServiceUrl("http://www.xmlsoccer.com/FootballDataDemo.asmx"); 
    $results = $soccer->GetHistoricMatchesByLeagueAndSeason(array("league"=>$leagueretrive,"seasonDateString"=>"$date1$date2")); 
    print_r($results); 
} catch (XMLSoccerException $e) { 
    echo "XMLSoccerException: " . $e->getMessage(); 
} 
foreach ($results->Match as $team) { 
    $id = $team->Id; 
    $homeGoalDetails = $team->HomeGoalDetails; 

///INSERTING DATA INTO THE TABLE 
    $sql = "INSERT INTO $file_name (HomeGoalDetails) 
VALUES ('".mysqli_real_escape_string($conn,$homeGoalDetails)."') 
on duplicate key update HomeGoalDetails='".mysqli_real_escape_string($conn,$homeGoalDetails)."'"; 
} 
    if ($conn->query($sql) === TRUE) { 
     echo "New record created successfully"; 
    } else { 
     echo "Error: " . $sql . "<br>" . $conn->error; 
    } 
$conn->close(); 
?>