Php SQL插入故障
我在这个代码前坐了两个小时我不知道出了什么问题：( 我一直在尝试创建一个html表单，该表单调用php函数将表单中的信息插入数据库，但由于某些原因无法正常工作：/ 这是我的表单代码：Php SQL插入故障,php,mysql,Php,Mysql,我在这个代码前坐了两个小时我不知道出了什么问题：( 我一直在尝试创建一个html表单，该表单调用php函数将表单中的信息插入数据库，但由于某些原因无法正常工作：/ 这是我的表单代码： <?php include 'connection.php'; ?> <html> <body> <form action="user_create.php" method="POST"> username: <input type="text" name="u
<?php include 'connection.php'; ?>
<html>
<body>
<form action="user_create.php" method="POST">
username: <input type="text" name="username"/>
password: <input type="text" name="password"/>
email: <input type="text" name="email"/>
<input type="submit" name='submit' value="user_create"/>
</form>
</body>
</html>
用户名：
密码：
电邮：
<?php
//Connecting databases
$localhost = "";
$dbuser = "";
$dbpass = "m";
$dbname = "";
$connect = mysql_connect($localhost, $dbuser, $dbpass);
mysql_select_db("$dbname", $connect);
?>
<?php include 'connection.php';?>
<?php
if (isset($_POST['submit']))
{
$username = $_POST['username'];
$password = $_POST['password'];
$email = $_POST['email'];
$query = mysql_query("INSERT INTO users( username,password,email,type)
VALUES ('$username', '$password', '$email','1')");
mysql_query($query);
echo '<script type="text/javascript">alert("You have been registered");</script>';
}
else
{
echo '<script type="text/javascript">alert("jo");</script>';
}
?>
您连接正确吗
$dbuser=”“；//Connecting databases
$localhost = "";
$dbuser = "";
$dbpass = "m";
$dbname = "";
您应该使用PHP-PDO，以避免SQL注入攻击，它还将修复插入问题
<?php
/*** mysql hostname ***/
$hostname = 'localhost';
/*** mysql username ***/
$username = 'username';
/*** mysql password ***/
$password = 'password';
try {
$dbh = new PDO("mysql:host=$hostname;dbname=animals", $username, $password);
/*** echo a message saying we have connected ***/
echo 'Connected to database<br />';
/*** INSERT data ***/
$sql = "INSERT INTO users(username,
password,
email,
type) VALUES (
:username,
:password,
:email,
:type)";
$stmt = $pdo->prepare($sql);
$stmt->bindParam(':username', $_POST['username'], PDO::PARAM_STR);
$stmt->bindParam(':password', $_POST['password'], PDO::PARAM_STR);
$stmt->bindParam(':email', $_POST['email'], PDO::PARAM_STR);
$stmt->bindParam(':type', $_POST['type'], PDO::PARAM_INT);
$stmt->execute();
}
catch(PDOException $e)
{
echo $e->getMessage();
}
?>
“$var”“$var”