Fehler bei Update-Funktion

Hi@

Ich mache zur Zeit eine Page, auf welcher ich mein Profil bearbeiten können möchte. Jedoch bekomme ich eine Fehlermeldung, wenn die Update-Funktion ausgeführt wird.
Ungültige Abfrage: You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'WHERE user_ID like '23'' at line 14

Zum Quelltext.

useredit=self.php (Formular)

Zitat:

---

<?php

include ('checkuser.php');

$sql = "SELECT * FROM users WHERE (user_ID like '".$_SESSION["user_ID"]."')";
$result = mysql_query ($sql);
if (mysql_num_rows ($result) > 0)
{
$data = mysql_fetch_array ($result);
}
echo '<form action="index.php?site=useredit=self=1" method="post" class="formular">';
echo '<table width="604" border="0" cellspacing="0" cellpadding="0">';
echo '<tr>';
echo '<td colspan="2" height="5"></td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20">&nbsp;</td>';
echo '<td class="thema">profil editieren</td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20" height="3">&nbsp;</td>';
echo '<td class="text"><label for="name">Nickname*</label><br><input type="text" name="e_Nickname" id="e_Nickname" value=\''. $data['user_Nickname'] .'\'></td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20" height="3">&nbsp;</td>';
echo '<td class="text"><label for="name">E-Mail*</label><br><input type="text" name="e_Mail" id="e_Mail" value=\''. $data['user_Mail'] .'\'></td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20" height="3">&nbsp;</td>';
echo '<td class="text"><label for="name">Vorname*</label><br><input type="text" name="e_Vorname" id="e_Vorname" value=\''. $data['user_Vorname'] .'\'></td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20" height="3">&nbsp;</td>';
echo '<td class="text"><label for="name">Nachname</label><br><input type="text" name="e_Nachname" id="e_Nachname" value=\''. $data['user_Nachname'] .'\'></td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20" height="3">&nbsp;</td>';
echo '<td class="text"><label for="name">Geburtstag</label><br><input type="text" name="e_Geburtstag" id="e_Geburtstag" value=\''. $data['user_Geburtstag'] .'\'></td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20" height="3">&nbsp;</td>';
echo '<td class="text"><label for="name">Adresse</label><br><input type="text" name="e_Adresse" id="e_Adresse" value=\''. $data['user_Adresse'] .'\'></td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20" height="3">&nbsp;</td>';
echo '<td class="text"><label for="name">PLZ / Ort</label><br><input type="text" name="e_PLZ" id="e_PLZ" value=\''. $data['user_PLZ'] .'\'>&nbsp;/&nbsp;<input type="text" name="e_Ort" id="e_Ort" value=\''. $data['user_Ort'] .'\'></td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20" height="3">&nbsp;</td>';
echo '<td class="text"><label for="name">Land*</label><br><input type="text" name="e_Land" id="e_Land" value=\''. $data['user_Land'] .'\'></td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20" height="3">&nbsp;</td>';
echo '<td class="text"><label for="name">Altes Passwort*</label><br><input type="password" name="e_old_Pass" id="e_old_Pass"></td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20" height="3">&nbsp;</td>';
echo '<td class="text"><label for="name">Neues Passwort</label><br><input type="password" name="e_Pass" id="e_Pass" value=""></td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20" height="3">&nbsp;</td>';
echo '<td class="text"><input type="submit" name="submit" value="Aktualisieren" />&nbsp;<input type="reset" name="submit" value="Zurücksetzen" /></td>';
echo '</tr>';
echo '</table>';
echo '</form>';
?>

---

Zitat:

---

<?php

include ('checkuser.php');

echo '<table width="604" border="0" cellspacing="0" cellpadding="0">';
echo '<tr>';
echo '<td colspan="2" height="5"></td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20">&nbsp;</td>';
echo '<td class="thema">profil editieren</td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20" height="3">&nbsp;</td>';
echo '<td class="text">';

/*if($_POST['e_old_Pass'] <> $_SESSION['user_Pass'])
{
die("Das Passwort ist falsch.");
}


if(trim($_POST['e_Nickname']) == "")
{
die("Bitte Füllen Sie die obligatorischen Felder aus.");
}

if(trim($_POST['e_Pass']) == "")
{
die("Bitte Füllen Sie die obligatorischen Felder aus.");
}

if(trim($_POST['e_Mail']) == "")
{
die("Bitte Füllen Sie die obligatorischen Felder aus.");
}

if(trim($_POST['e_Vorname']) == "")
{
die("Bitte Füllen Sie die obligatorischen Felder aus.");
}

if(trim($_POST['e_Land']) == "")
{
die("Bitte Füllen Sie die obligatorischen Felder aus.");
}
*/

echo '</td>';
echo '</tr>';
echo '</table>';

$result = mysql_query('
UPDATE
users
SET
user_Nickname = \'' . $_POST['e_Nickname'] . '\',
user_Pass = \'' . $_POST['e_Pass'] . '\',
user_Mail = \'' . $_POST['e_Mail'] . '\',
user_Vorname = \'' . $_POST['e_Vorname'] . '\',
user_Nachname = \'' . $_POST['e_Nachname'] . '\',
user_Adresse = \'' . $_POST['e_Adresse'] . '\',
user_Ort = \'' . $_POST['e_Ort'] . '\',
user_Geburtstag = \'' . $_POST['e_Geburtstag'] . '\',
user_Land = \'' . $_POST['e_Land'] . '\',
user_PLZ = \'' . $_POST['e_PLZ'] . '\',
WHERE
user_ID like \''.$_SESSION["user_ID"].'\'');
if (!$result) {
die('Ungültige Abfrage: ' . mysql_error());
}
echo '<table width="604" border="0" cellspacing="0" cellpadding="0">';
echo '<tr>';
echo '<td colspan="2" height="5"></td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20">&nbsp;</td>';
echo '<td class="thema">profil editieren</td>';
echo '</tr>';
echo '<tr>';
echo '<td width="20" height="3">&nbsp;</td>';
echo '<td class="text">Sie haben Ihre Daten erfolgreich verändert.</td>';
echo '</tr>';
echo '</table>';
?>

---

Zitat:

---

<?

$sql = "SELECT * FROM users WHERE (user_Nickname like '".$_REQUEST["username"]."') AND (user_Pass = '".md5 ($_REQUEST["userpass"])."')";
$result = mysql_query ($sql);

if (mysql_num_rows ($result) > 0)
{
// Benutzerdaten in ein Array auslesen.
$data = mysql_fetch_array ($result);

// Sessionvariablen erstellen und registrieren
$_SESSION["user_ID"] = $data["user_ID"];
$_SESSION["user_Pass"] = $data["user_Pass"];
$_SESSION["user_Nickname"] = $data["user_Nickname"];
$_SESSION["user_PLZ"] = $data["user_PLZ"];
$_SESSION["user_Ort"] = $data["user_Ort"];
$_SESSION["user_Nachname"] = $data["user_Nachname"];
$_SESSION["user_Vorname"] = $data["user_Vorname"];
$_SESSION["user_Geburtstag"] = $data["user_Geburtstag"];
$_SESSION["user_Land"] = $data["user_Land"];
$_SESSION["user_Adresse"] = $data["user_Adresse"];
$_SESSION["user_Rechte"] = $data["user_Rechte"];

echo '<script LANGUAGE="JavaScript">
top.location.href=\'index.php?site=home\'
</script>';
}
else
{
echo '<script LANGUAGE="JavaScript">
top.location.href=\'index.php?site=login\'
</script>';
}

?>

---