Php VAR数据未推送到SQL

我有一个小问题，我不知道为什么。也许有人能帮我。首先是一些免责声明；我仍在学习PHP，我知道mysqli或pdo，但它所使用的服务器运行的是旧版本的PHP

好的，现在开始这个问题

我有一个表单，它传递到我的post-data.php表单以推送到SQL db

然而，当它推送数据时，它只是从表单的post操作推送变量，而不是vars中的数据

我的代码如下：

<?php
    $hostname = "localhost"; $username = "goldme_owner";
    $dbName = "goldme_dealer_meeting";

    $connect = mysql_connect($hostname, $username);
    if (!$connect) { 
        echo "Please try later."; 
    } 
    else { 
        mysql_select_db($dbName, $connect); 
        $checkboxA1 = isset($_POST['checkboxA1']) ? $_POST['checkboxA1'] : 'No';
        $checkboxE1 = isset($_POST['checkboxE1']) ? $_POST['checkboxE1'] : 'No';
        $checkboxF1 = isset($_POST['checkboxF1']) ? $_POST['checkboxF1'] : 'No';
        $checkboxG1 = isset($_POST['checkboxG1']) ? $_POST['checkboxG1'] : 'No';
        $checkboxH1 = isset($_POST['checkboxH1']) ? $_POST['checkboxH1'] : 'No';
        $checkboxI1 = isset($_POST['checkboxI1']) ? $_POST['checkboxI1'] : 'No';
        $checkboxJ1 = isset($_POST['checkboxJ1']) ? $_POST['checkboxJ1'] : 'No';
        $checkboxK1 = isset($_POST['checkboxK1']) ? $_POST['checkboxK1'] : 'No';
    }

    echo "$checkboxA1"; //just want to make sure checkbox vars are passing //will delete in final code
    echo "$checkboxE1"; //just want to make sure checkbox vars are passing //will delete in final code
    echo "$checkboxF1"; //just want to make sure checkbox vars are passing //will delete in final code
    echo "$checkboxG1"; //just want to make sure checkbox vars are passing //will delete in final code
    echo "$checkboxH1"; //just want to make sure checkbox vars are passing //will delete in final code
    echo "$checkboxI1"; //just want to make sure checkbox vars are passing //will delete in final code
    echo "$checkboxJ1"; //just want to make sure checkbox vars are passing //will delete in final code
    echo "$checkboxK1"; //just want to make sure checkbox vars are passing //will delete in final code
    echo "$_POST[confirm]"; //just want to make sure confirm code generated //will delete in final code

        $sql_statement = 'INSERT INTO 2014_registrations'. 
        '(confirm_number,timecode,company_name,country,address1,address2,city'.
        ',state,zip,phone,fax,email,zone_manager,transport,first_name,'.
        'last_name,tuesday_tours,tuesday_meat,wed_lunch,wed_dinner,'.
        'wed_pool_tourney,thurs_lunch,thurs_dinner,fri_shop,fri_tour,dietary)'.
        'VALUES ("$_POST[confirm]","$_POST[timecode]","$_POST[company_name]",'.
        '"$_POST[address]","$_POST[address2]","$_POST[city]","$_POST[state]",'.
        '"$_POST[zip]","$_POST[country]","$_POST[phone]","$_POST[fax]",'.
        '"$_POST[email]","$_POST[zonemanager]","$_POST[transport]",'.
        '"$_POST[fattendee1]","$_POST[lattendee1]","$_POST[checkboxA1]",'.
        '"$_POST[radio1]","$_POST[checkboxE1]","$_POST[checkboxF1]",'.
        '"$_POST[checkboxG1]","$_POST[checkboxH1]","$_POST[checkboxI1]",'.
        '"$_POST[checkboxJ1]","$_POST[checkboxK1]","$_POST[dietary1]")';


    $rec_insert = mysql_query($sql_statement);
    if(! $rec_insert ){
        die('Could not enter data: ' . mysql_error());
    }
    echo "Entered data successfully\n";
    mysql_close($connect);
?> 

---

变量被读取为字符串，因为它们是用单引号写的

我已经将变量移到单引号之外，并将它们连接到字符串此代码极易受SQL注入的影响，不应在生产环境中使用。

$sql_statement = 'INSERT INTO 2014_registrations'. 
'(confirm_number,timecode,company_name,country,address1,address2,city'.
',state,zip,phone,fax,email,zone_manager,transport,first_name,'.
'last_name,tuesday_tours,tuesday_meat,wed_lunch,wed_dinner,'.
'wed_pool_tourney,thurs_lunch,thurs_dinner,fri_shop,fri_tour,dietary)'.
'VALUES ("'.$_POST[confirm].'","'.$_POST[timecode].'","'.$_POST[company_name].'",'.
'"'.$_POST[address].'","'.$_POST[address2].'","'.$_POST[city].'","'.$_POST[state].'",'.
'"'.$_POST[zip].'","'.$_POST[country].'","'.$_POST[phone].'","'.$_POST[fax].'",'.
'"'.$_POST[email].'","'.$_POST[zonemanager].'","'.$_POST[transport].'",'.
'"'.$_POST[fattendee1].'","'.$_POST[lattendee1].'","'.$_POST[checkboxA1].'",'.
'"'.$_POST[radio1].'","'.$_POST[checkboxE1].'","'.$_POST[checkboxF1].'",'.
'"'.$_POST[checkboxG1].'","'.$_POST[checkboxH1].'","'.$_POST[checkboxI1].'",'.
'"'.$_POST[checkboxJ1].'","'.$_POST[checkboxK1].'","'.$_POST[dietary1].'")';

首先，从POST请求直接将数据插入数据库几乎从来都不是一个好主意

我知道这是非常糟糕的格式，但请尝试使用以下$sql\u语句：

$sql_statement = 'INSERT INTO 2014_registrations'. 
    '(confirm_number,timecode,company_name,country,address1,address2,city'.
    ',state,zip,phone,fax,email,zone_manager,transport,first_name,'.
    'last_name,tuesday_tours,tuesday_meat,wed_lunch,wed_dinner,'.
    'wed_pool_tourney,thurs_lunch,thurs_dinner,fri_shop,fri_tour,dietary)'.
    "VALUES (\"{$_POST[confirm]}\",\"{$_POST[timecode]}\",\"{$_POST[company_name]}\",".
    "\"{$_POST[address]}\",\"{$_POST[address2]}\",\"{$_POST[city]}\",\"{$_POST[state]}\",".
    "\"{$_POST[zip]}\",\"{$_POST[country]}\",\"{$_POST[phone]}\",\"{$_POST[fax]}\",".
    "\"{$_POST[email]}\",\"{$_POST[zonemanager]}\",\"{$_POST[transport]}\",".
    "\"{$_POST[fattendee1]}\",\"{$_POST[lattendee1]}\",\"{$_POST[checkboxA1]}\",".
    "\"{$_POST[radio1]}\",\"{$_POST[checkboxE1]}\",\"{$_POST[checkboxF1]}\",".
    "\"{$_POST[checkboxG1]}\",\"{$_POST[checkboxH1]}\",\"{$_POST[checkboxI1]}\",".
    "\"{$_POST[checkboxJ1]}\",\"{$_POST[checkboxK1]}\",\"{$_POST[dietary1]}\")";

你的“sql”陈述是错误的

$sql_statement = 'INSERT INTO 2014_registrations'. 
    '(confirm_number,timecode,company_name,country,address1,address2,city'.
    ',state,zip,phone,fax,email,zone_manager,transport,first_name,'.
    'last_name,tuesday_tours,tuesday_meat,wed_lunch,wed_dinner,'.
    'wed_pool_tourney,thurs_lunch,thurs_dinner,fri_shop,fri_tour,dietary)'.
    'VALUES ("$_POST[confirm]","$_POST[timecode]","$_POST[company_name]",'.
    '"$_POST[address]","$_POST[address2]","$_POST[city]","$_POST[state]",'.
    '"$_POST[zip]","$_POST[country]","$_POST[phone]","$_POST[fax]",'.
    '"$_POST[email]","$_POST[zonemanager]","$_POST[transport]",'.
    '"$_POST[fattendee1]","$_POST[lattendee1]","$_POST[checkboxA1]",'.
    '"$_POST[radio1]","$_POST[checkboxE1]","$_POST[checkboxF1]",'.
    '"$_POST[checkboxG1]","$_POST[checkboxH1]","$_POST[checkboxI1]",'.
    '"$_POST[checkboxJ1]","$_POST[checkboxK1]","$_POST[dietary1]")';

改为：

$sql_statment = "INSERT INTO 2014_registrations". 
    "(confirm_number,timecode,company_name,country,address1,address2,city".
    ",state,zip,phone,fax,email,zone_manager,transport,first_name,".
    "last_name,tuesday_tours,tuesday_meat,wed_lunch,wed_dinner,".
    "wed_pool_tourney,thurs_lunch,thurs_dinner,fri_shop,fri_tour,dietary)".
    "VALUES ($_POST['confirm'],$_POST['timecode'],$_POST['company_name'],".
    "$_POST['address'],$_POST['address2'],$_POST['city'],$_POST['state'],".
    "$_POST['zip'],$_POST['country],$_POST[phone'],$_POST['fax'],".
    "$_POST['email'],$_POST['zonemanager'],$_POST['transport'],".
    "$_POST['fattendee1'],$_POST['lattendee1'],$_POST['checkboxA1'],".
    "$_POST['radio1'],$_POST['checkboxE1'],$_POST['checkboxF1'],".
    "$_POST['checkboxG1'],$_POST['checkboxH1'],$_POST['checkboxI1'],".
    "$_POST['checkboxJ1'],$_POST['checkboxK1'],$_POST['dietary1']")";

如果您使用的是
$sql\u station='
，则不能在
$sql\u station='$\u POST[confirm]'中放入变量因为它会将其视为文本。您必须将其设置为“
$sql\u station=$\u POST['checkboxG1']”、“$\u POST['checkboxH1']”、“$\u POST['checkboxI1']”、”。
另一种方法是将其全部更改为
$sql\u station=“$\u POST['checkboxG1']，$\u POST['checkboxH1']，$\u POST['checkboxI1']，”像我一样

注意在使用“and”时存在差异

顺便说一句。您应该使用一些安全性，例如
mysql\u escape\u string
在单引号内，变量不作为变量读取。例如
echo'$a'
将打印
$a
，但
echo'$a
将打印
$a
的值

在代码中，您试图使用类似于“
”$a“
”的东西，或者换句话说，您在变量周围使用单引号，而不是双引号

试着把它写成

"VALUES ('$_POST[confirm]','$_POST[timecode]','$_POST[company_name]',".

或

等等

请注意，使用
$\u POST[confirm]
会发出通知。正确的使用方法是
$\u POST['confirm']

还注意到，您的代码易受SQL注入的影响。请考虑使用准备好的语句。
您易受攻击。您需要学习基本的PHP语法：<代码> <代码> -引用的字符串不象<代码> >代码>：引用字符串：PHP 5在10年前发布，所以您可能需要考虑更新到更近的版本。此外，数据库规范化可能会使您的系统更具可重用性，您可以避免使用诸如
2014\u注册
、
wed\u晚餐
等表名和列名。
'VALUES ("'.$_POST[confirm].'","'.$_POST[timecode].'","'.$_POST[company_name].'",'.