尝试将数组值用作SQL插入值

时间:2016-02-27 23:18:05

标签: php mysql sql arrays string

嘿伙计我正在尝试使用我从之前的查询中得到的值,新值,值是存储在数组中的字符串,它们是$ Name和$ Email变量,它看起来像这样的时候我var_dump他们... string' nathgold' (length = 8)....我想在新查询的插入中使用该nathgold作为值。我在第30行的C:\ wamp \ www \ login \ post.php中收到错误注意:数组转换为字符串

<?php
include_once('connect-db.php');
session_start();

if(!isset($_SESSION['isLogged']))
{
 header("Location: home.php");
 die();
}

    if (!isset($_REQUEST['MBID'])) exit;
    if (!isset($_REQUEST['Parent'])) {
        $Parent = 0;
    } else {
        $Parent = $_REQUEST['Parent'];
    }

    if (isset($_POST['Title'])) {

        $user_info=mysqli_query($connection, "SELECT * FROM usertest WHERE id=".$_SESSION['user']);
        $userRow=mysqli_fetch_array($user_info);

        $Name = $userRow=['username'];
        $Email = $userRow=['email'];
        $Title = mysqli_real_escape_string($connection, $_POST['Title']);
        $Message = mysqli_real_escape_string($connection, $_POST['Message']);
        $CurrentTime = time();
        // other filtering here...

        $result = mysqli_query($connection, "INSERT INTO mbmsgs (MBID, Parent, Poster, Email, Title, Message, DateSubmitted) VALUES ({$_REQUEST['MBID']}, $Parent, ".$Name.", ".$Email.", '$Title', '$Message', $CurrentTime);");
        if ($result) {
            echo "Your message has been posted - thanks!<br /><br />";
            echo "<A HREF=\"mbindex.php?MBID={$_REQUEST['MBID']}\">Back to messageboard</a>";
            exit;
        } else {
            echo "There was a problem with your post - please try again.<br /><br />";
        }
    }
?>     
<form method="post" action="post.php">

Message title: <input type"text" name="Title" /><br /><br />
Message:<BR />
<textarea name="Message" rows="10" cols="40"></textarea><br /><br />
<input type="hidden" name="MBID" value="<?php echo $_REQUEST['MBID']; ?>" />
<input type="hidden" name="Parent" value="<?php echo $Parent; ?>" />
<input type="submit" value="Post" />
</form>

1 个答案:

答案 0 :(得分:0)

您要在字符串上转换$ name:

use implode("|",$name);