php - sql语句拼接 报错

Question

1054:'where 子句' 中存在未知列 'a.first_letter'
但数据表有first_letter 这个字段的
[ SQL 语句 ] : SELECT a.id AS vod_id, a.classid AS vod_classid, a.name AS vod_name, a.pic_url AS vod_pic_url、a.definition AS vod_definition、a.movi​​e_type AS vod_movie_type、b.price AS vod_price、c.pay_flag AS vod_pay_flag FROM vod AS a LEFT JOIN vod_price AS b ON b.vod_id = a.id LEFT JOIN vod_pay_log AS c ON c.pay_vod_id = a.id AND c.checkin_id = ''WHERE a.status = 1 AND a.classid =1 AND a.first_letter like 'A%' ORDER BY a.sort, a.id DESC ;

Answer 1

歪个楼，一般不要使用sql拼接，因为这样会使攻击者可以SQL注入。最好使用框架带的MODEL层，或者自己写。

Answer 2

你可以试下把a.first_letter放到查询字段里面,记得好像5.7版本之后的sql,查询条件字段必须在select里面有查出来.也可以通过修改my.cnf避免这个.

Answer 3

desc vod;