Question

我的数据问题没有通过phpMyAdmin。服务器和数据库连接PHP但数据未插入表中。

这是我到目前为止所做的。

    <?php 

    $dbConnect = mysqli_connect("xxxxxxx", "xxxxx","xxxxx");
    if (!$dbConnect)
    die("<p>The database server is not available.</p>");
    echo "<p>Successfully connected to the database server.</p>";
    $dbSelect = mysqli_select_db( $dbConnect,"sxxxxxxx_db" );
    if (!$dbSelect)
    die("<p>The database is not available.</p>");
    echo "<p>Successfully opened the database.</p>";

    $sql = "INSERT INTO customer (Name,Password,Email,Phone) VALUES ('$_POST[namefield]', '$_POST[pwdfield]','$_POST[email]','$_POST[phone]' ) ";

     mysqli_query($sql,$dbConnect);

     mysqli_close($dbConnect);

    if(isset($_POST['namefield']) && isset($_POST['pwdfield']) && isset($_POST['cpwdfield']) && isset($_POST['email']) && isset($_POST['phone']) && isset($_POST['submit']))
        {
            $name = $_POST['namefield'];
            $password = $_POST['pwdfield'];
            $cpassword = $_POST['cpwdfield'];
            $email = $_POST['email'];
            $phone = $_POST['phone'];

            if ($_POST["pwdfield"] == $_POST["cpassword"])
    mysqli_query("INSERT INTO user VALUES('','$password')") or die(mysqli_error());

       else {
       echo("Password did not match! Try again. ");

Answer 1

关闭您的连接。
您不应在查询中直接使用$ _POST，请使用以下方法来阻止SQL注入。

＆＃13;

//Connect

$unsafe_variable = $_POST["user-input"];
$safe_variable = mysql_real_escape_string($unsafe_variable);

mysql_query("INSERT INTO table (column) VALUES ('" . $safe_variable . "')");

//Disconnect

＆＃13;

Answer 2

您已关闭数据库连接

 mysqli_close($dbConnect);

Answer 3

稍微改变sql

$sql = "INSERT INTO customer (Name,Password,Email,Phone) VALUES ('".$_POST['namefield']."', '".$_POST['pwdfield']."','".$_POST['email']."','".$_POST['phone']."' ) "

插入的数据不会转到phpMyAdmin数据库

3 个答案: