Question

我在从HTML字段获取数据时遇到了一些问题。这是它在HTML中的外观

<form action="getInfo.php">
    <span>Series</span>
    <input class="searchFieldAlign" type="text" name="seriesName" /><Br>

    <span>Volume</span>
    <input class="searchFieldAlign" type="text" name="volumeName" /><Br>

    <span>Nr</span>
    <input class="searchFieldALign" type="text" name="issueNR" /><Br>

    <p input class="searchFieldALign" type=submit></p>
</form>

这是我的php脚本：

<?php
$seriesName = mysqli_real_escape_string($conn, $_POST['seriesName']);
$volumeName = mysqli_real_escape_string($conn, $_POST['volumeName']);
$issueNR = mysqli_real_escape_string($conn, $_POST['issueNR']);
$con=mysqli_connect("localhost","user","psswd","db");

// Check connection
if (mysqli_connect_errno())
  {
  echo "Failed to connect to MySQL: " . mysqli_connect_error();
  }
$qryIssueInfo = mysqli_query($con,"select issueNR, issueVolume, issueName, issueImageURL from issue, series where (seriesName='$seriesName') and (issueVolume='$volumeName') and (issueNR=$issueNR)");
$rowIssueInfo = mysqli_fetch_array($qryIssueInfo);

问题是我没有从查询中获得输出。如果我把它改成这个没有问题：

$qryIssueInfo = mysqli_query($con,"select issueNR, issueVolume, issueName, issueImageURL from issue, series where seriesName='Buffy, the Vampire Slayer' and issueVolume= 'Season 8' and issueNR=1");

Answer 1

如果你没有设置form method =“post”，它将是“get”，你应该$ _GET。

要更正：

<form method="post" action"getInfo.php">

放轻松

Answer 2

第一个版本不包含变量周围的撇号。

您还应该考虑安全性问题，例如SQL注入。

PHP从HTML字段获取数据

2 个答案: