Question

我的网站发生了一些奇怪的事情。一切都很完美，现在我在尝试登录时遇到了这个错误：

致命错误：在第9行调用未定义的方法PDO :: select（）

这是我的代码：

<?php
$db = new PDO('mysql:host=****;dbname=******;charset=utf8', '*****', '*****');

if($_SERVER["REQUEST_METHOD"] == "POST")
{
// username and password sent from Form
$myusername = $_POST['username'];
$mypassword = $_POST['password'];
$result = $db->select("SELECT userID FROM miembros WHERE user='$myusername' and  pass='$mypassword' AND confirm IS NULL");
$row = $result->fetch(PDO::FETCH_ASSOC);
$count = $result->rowCount();
// code continues
?>

我在第9行和$ db做错了什么？

Answer 1

您希望使用PDO::prepare准备一份语句，然后execute

  $db = new PDO('mysql:host=****;dbname=******;charset=utf8', '*****', '*****');

  if($_SERVER["REQUEST_METHOD"] == "POST")
  {
    // username and password sent from Form
    $prepared = array(
      'username' => $_POST['username'],
      'password' => $_POST['password']);
    $stmt = $db->prepare("SELECT userID FROM miembros WHERE user=:username and  pass=:password AND confirm IS NULL");
    $result = $stmt->execute($prepared);
    $row = $result->fetch(PDO::FETCH_ASSOC);
    $count = $result->rowCount();
  }

致命错误：在第9行调用未定义的方法PDO :: select（）

1 个答案: