前端查询和PHP SQL语句

Question

我正试图从一个网站提交一个查询，以便从MySQL数据库中检索某些记录。当我从站点表单执行查询时，当我知道它不为空时，我得到了'Invalid query: query was empty‘的mysql_error()返回。

$Level = $_POST['level'];
$Year  = $_POST['year'];
$Name  = $_POST['name'];
$Award  = $_POST['award'];

$query = mysql_query("SELECT *
    FROM wineawards
    WHERE LEVEL = $Level
      OR YEAR = $Year
      OR name = $Name
      OR award = $Award

    ");

$result = mysql_query($query);

不确定我是否在这里遗漏了什么，或者输入了错误的东西？

Answer 1

$query = mysql_query("SELECT *
    FROM wineawards
    WHERE LEVEL = '$Level'
      OR YEAR = '$Year'
      OR name = '$Name'
      OR award = '$Award'

    ");

$result = mysql_query($query);

Answer 2

那这个呢？

$query = mysql_query("SELECT *
  FROM wineawards
  WHERE LEVEL = '" . $Level . "'
  OR YEAR = '" . $Level . "'
  OR name = '" . $Name . "'
  OR award = '" . $Award . "'

 ");