Question

代码：

<?php
    session_start();

    if ( isset($_GET['user']) && isset($_GET['pass']) )
    {
            $sql = "SELECT * FROM `users` WHERE `name` = '" . $_GET['user'] . "' AND `password` = '" . $_GET['pass'] . "';";
            echo("query: $sql <br />");
            $db = mysqli_connect("localhost", "root", "<password here>", "1596");
            if (mysqli_connect_errno($db)) { die("err"); }
            $result = mysqli_query($db, $sql);
            echo($query);
            $row = mysqli_fetch_aray($result);
            echo($row);
            if ($row['name'] == $_GET['user'])
            {
                    $_SESSION['uid'] = $row['name'];
                    $_SESSION['level'] = $row['level'];
                    echo("logged in as " . $_SESSION['uid']);
            }
    }
    else
    {   
            die("Error, not enough parameters");
    }
?>

如果我在服务器上运行该查询，那很好..没有连接错误，所以想知道我哪里出错了

Answer 1

        $db = mysqli_connect("localhost", "root", "<password here>", "1596");
        if (mysqli_connect_errno($db)) { die("err"); }
        $result = mysqli_query($db, $sql); // line corrected
        $row = mysqli_fetch_array($result); // line corrected

SQL查询无法正常运行，没有完美的查询输出

1 个答案: