url´æÈëmysqlÊý¾Ý¿âÇ°µÄʱºòÒª½øÐÐʲô´¦Àí£¿

SQL code:
UPDATE `footballmatch`.`promote` SET `pr_ballhype` = http://ballhype.com/post/url/?url=http%3A//www.allfootballtv.com/%3Fp%3D369&league=8 WHERE `promote`.`fm_post_id` =369


ÒÔÉÏsqlÓï¾ä´æÈëmysqlÖеÄʱºòÌáʾ´íÎó£º
1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '://ballhype.com/post/url/?url=http%3A//www.allfootballtv.com/%3Fp%3D369&league=8' at line 2


pr_ballhype ×Ö¶ÎÀàÐÍΪvarchar

ÇëÎʸÃÈçºÎÐÞ¸ÄÄØ£¿

---

varcharÐÍ¿´¿´×Ö·ûÊÇ·ñ×ã¹»Óá£
UPDATE `footballmatch`.`promote` SET `pr_ballhype` = 'http://ballhype.com/post/url/?url=http%3A//www.allfootballtv.com/%3Fp%3D369&league=8'  WHERE `promote`.`fm_post_id` =369 //·ÖºÅÉÙ²»ÁË£¡

---

htmlspecialchars(),

---

ÒýÓÃ

varcharÐÍ¿´¿´×Ö·ûÊÇ·ñ×ã¹»Óá£
UPDATE `footballmatch`.`promote` SET `pr_ballhype` ='http://ballhype.com/post/url/?url=http%3A//www.allfootballtv.com/%3Fp%3D369&league=8'  WHERE `promote`.`fm_post_id` =369 //·ÖºÅÉÙ²»ÁË£¡

ȷʵÊǼӸöÒýºÅ¾ÍÐÐÁË£¬Ð»Ð»ÁË