前端查询和PHP SQL语句

Question

我正在尝试从站点提交查询以从MySQL数据库中检索某些记录。当我从站点表单执行查询时，当我知道它不为空时，我得到'无效查询：查询为空'的mysql_error（）返回。

$Level = $_POST['level'];
$Year  = $_POST['year'];
$Name  = $_POST['name'];
$Award  = $_POST['award'];

$query = mysql_query("SELECT *
    FROM wineawards
    WHERE LEVEL = $Level
      OR YEAR = $Year
      OR name = $Name
      OR award = $Award

    ");

$result = mysql_query($query);

不确定我在这里遗漏了什么，或者输错了什么？

Answer 1

$query = mysql_query("SELECT *
    FROM wineawards
    WHERE LEVEL = '$Level'
      OR YEAR = '$Year'
      OR name = '$Name'
      OR award = '$Award'

    ");

$result = mysql_query($query);

Answer 2

这个怎么样？

$query = mysql_query("SELECT *
  FROM wineawards
  WHERE LEVEL = '" . $Level . "'
  OR YEAR = '" . $Level . "'
  OR name = '" . $Name . "'
  OR award = '" . $Award . "'

 ");