Javascript 使用ajax提交PHP准备好的语句

首先，我刚刚学习了

PHP

prepared语句和sql注入。我的第一个问题是，这个

php

代码是否足以阻止sql注入。我的第二个问题是如何使用

Ajax

提交这个php语句。提前谢谢

<?php
require_once ("db.php");
$db = new MyDB();
session_start();

if (isset($_POST['submit_req']))
{
$req_title = $_POST['req_title'];
$req_min = $_POST['req_min'];
$req_entry = $_POST['req_entry'];
$req_payment = $_POST['req_payment'];
$post_req = $_POST['post_req'];

$stmt = $db->prepare('INSERT INTO users_request (req_title, min_order, poi, pay_method, req_brief) VALUES (:req_title, :min_order, :poi, :pay_method, :req_brief)');
$stmt->bindValue(':req_title', $req_title, SQLITE3_TEXT);
$stmt->bindValue(':min_order', $req_min, SQLITE3_TEXT);
$stmt->bindValue(':poi', $req_entry, SQLITE3_TEXT);
$stmt->bindValue(':pay_method', $req_payment, SQLITE3_TEXT);
$stmt->bindValue(':req_brief', $post_req, SQLITE3_TEXT);

$result = $stmt->execute();

if ($result)
{
    echo "<p>Request post successful</p>";
}
}

表格

<div class="success"></div>
<div class="post_req">
<form action="req_exec.php" method="post" enctype="multipart/form-data" id="post_form">
    <input type="text" name="req_title" id="req_title" placeholder="Request title. (Example: Dried Cashew Nuts)">
    <input type="text" name="req_min" id="req_min" placeholder="Minimum Order. (Example: 2 Tons, 7800 units, 40 container, 1 Barrel)">
    <div class="form_division">
        <input type="text" name="req_entry" id="req_entry" placeholder="Point of Entry">
        <input type="text" name="req_payment" id="req_payment" placeholder="Payment Method">
    </div>
    <textarea name="post_req" id="post_req" placeholder="Briefly describe your request" rows="6"></textarea><br>
    <input type="submit" name="submit_req" id="submit_req" value="Post Request">
</form>
</div>

---

提前谢谢。

这就足以回答您的第一个问题：对于第二个问题，您有错误吗？控制台中真正的错误是什么。删除此

数据类型：“json”，“不需要数据类型：'json'，因为您的php代码中没有使用json\u编码。
<div class="success"></div>
<div class="post_req">
<form action="req_exec.php" method="post" enctype="multipart/form-data" id="post_form">
    <input type="text" name="req_title" id="req_title" placeholder="Request title. (Example: Dried Cashew Nuts)">
    <input type="text" name="req_min" id="req_min" placeholder="Minimum Order. (Example: 2 Tons, 7800 units, 40 container, 1 Barrel)">
    <div class="form_division">
        <input type="text" name="req_entry" id="req_entry" placeholder="Point of Entry">
        <input type="text" name="req_payment" id="req_payment" placeholder="Payment Method">
    </div>
    <textarea name="post_req" id="post_req" placeholder="Briefly describe your request" rows="6"></textarea><br>
    <input type="submit" name="submit_req" id="submit_req" value="Post Request">
</form>
</div>