Php 如何显示忘记密码的sql查询

Php 如何显示忘记密码的sql查询,php,mysql,forgot-password,Php,Mysql,Forgot Password,我是php/mysql新手,我想知道如何完成一个“忘记密码”页面,显示用户在注册过程中填写的问题 我有一个问题,但我似乎无法解决 $emailcheck = $_POST['email']; $checkit = mysql_query("SELECT * Security_Question FROM users WHERE email ='$emailcheck'") 所以我的问题是如何显示“安全问题”?您的SQL不正确 $checkit = mysql_query("SELECT Secu

我是php/mysql新手,我想知道如何完成一个“忘记密码”页面,显示用户在注册过程中填写的问题

我有一个问题,但我似乎无法解决

$emailcheck = $_POST['email'];
$checkit = mysql_query("SELECT * Security_Question FROM users WHERE email ='$emailcheck'")
所以我的问题是如何显示“安全问题”?

您的SQL不正确

$checkit = mysql_query("SELECT Security_Question FROM users WHERE email ='$emailcheck'");

您也不应该直接在SQL中使用POST变量。至少要先把它放大,否则就逃出去。最好还是用事先准备好的语句

http://php.net/manual/en/pdo.prepared-statements.php
使用mysql_fetch_array()方法从查询资源中提取数据:

$emailcheck = $_POST['email'];
$checkit = mysql_query("SELECT Security_Question FROM users WHERE email ='$emailcheck'"); //fixed query syntax*
if (!$checkit) exit(); //don't forget to catch query errors!
$result = mysql_fetch_array($checkit);
$question = $result['Security_Question'];

$question
将保留安全问题。

从您的查询中删除*号。感谢各位快速回复,非常感谢!
$emailcheck = $_POST['email'];
$checkit = mysql_query("SELECT Security_Question FROM users WHERE email ='$emailcheck'"); //fixed query syntax*
if (!$checkit) exit(); //don't forget to catch query errors!
$result = mysql_fetch_array($checkit);
$question = $result['Security_Question'];