Question

mysqli_real_escape_string()

mysqli_query()预计至少有2个参数，1个给定

我该怎么做？

这是我的代码

{
    $username = strip_tags($username);
    $password = strip_tags($password);

    $username = mysqli_real_escape_string($username);
    $password = mysqli_real_escape_string($password);
    $password = md5($password);
    $sql = mysqli_query("SELECT * FROM users WHERE name = '$username' && password = '$password' LIMIT 1") or die(mysql_error());
    $num_rows = mysqli_num_rows($sql);
    if($num_rows == 1)
    {
        $rows = mysqli_fetch_array($sql);

    }

Answer 1

您必须将mysqli资源传递给mysqli函数。

像：

mysqli_real_escape_string($mysqliResource, $username);

Answer 2

您尚未传递连接句柄。

$con = mysqli_connect("host", "my_user", "my_password", "db");
//Pass the connection handle to both.
$username = mysqli_real_escape_string($con, $username);
$sql = mysqli_query($con, "SELECT *...");

如何在PHP中给出2个参数？预计恰好有2个参数，给定1个

2 个答案: