Forum GestSup

Code : Tout sélectionner

Fatal error: Uncaught exception 'PDOException' with message 'SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'Alpe d'Huez','Alpe Agence','04 76 00 00 00')' at line 1' in /var/www/html/core/ldap.php:415 Stack trace: #0 /var/www/html/core/ldap.php(415): PDO->exec('INSERT INTO tus...') #1 /var/www/html/admin/user.php(884): include('/var/www/html/c...') #2 /var/www/html/admin.php(26): include('/var/www/html/a...') #3 /var/www/html/index.php(587): include('/var/www/html/a...') #4 {main} thrown in /var/www/html/core/ldap.php on line 415

Code : Tout sélectionner

//create GestSup account
							//escape special char for SQL query
							$givenname = $db->quote($givenname); 
							$sn = $db->quote($sn); 
							$streetaddress = $db->quote($streetaddress); 
							$company= $db->quote($company); 
							$title= $db->quote($title); 
						$cnt_create=$cnt_create+1;
						if($_GET['action']=='run') {
							echo '<i class="icon-plus-sign green bigger-130"></i><font color="green"> '.T_('Utilisateur').' <b>'.$givenname.' '.$sn.'</b> ('.$samaccountname.') '.T_('à été crée').'.</font><br />';
							$db->exec("INSERT INTO tusers (login,firstname,lastname,profile,mail,phone,address1,zip,city,company,fax) VALUES ('$samaccountname',$givenname,$sn,'2','$mail','$telephonenumber',$streetaddress,'$postalcode','$l',$company,'$fax')");
						} else {
							echo '<i class="icon-plus-sign green bigger-130"></i><font color="green"> '.T_('Création de l\'utilisateur').' <b>'.$givenname.' '.$sn.'</b> ('.$samaccountname.').</font><br />';
						}

Code : Tout sélectionner

//create GestSup account
							//escape special char for SQL query
							$givenname = $db->quote($givenname); 
							$sn = $db->quote($sn); 
							$streetaddress = $db->quote($streetaddress); 
							$company= $db->quote($company); 
							$title= $db->quote($title); 
							$l= $db->quote($l);
							$cnt_create=$cnt_create+1;
						if($_GET['action']=='run') {
							echo '<i class="icon-plus-sign green bigger-130"></i><font color="green"> '.T_('Utilisateur').' <b>'.$givenname.' '.$sn.'</b> ('.$samaccountname.') '.T_('à été crée').'.</font><br />';
							$db->exec("INSERT INTO tusers (login,firstname,lastname,profile,mail,phone,address1,zip,city,company,fax) VALUES ('$samaccountname',$givenname,$sn,'2','$mail','$telephonenumber',$streetaddress,'$postalcode',$l,$company,'$fax')");
						} else {
							echo '<i class="icon-plus-sign green bigger-130"></i><font color="green"> '.T_('Création de l\'utilisateur').' <b>'.$givenname.' '.$sn.'</b> ('.$samaccountname.').</font><br />';
						}