Question

好的，我遇到的问题很奇怪。我有一个博客网站，显示帖子列表，我制作了一个系统，一次只能选择10个帖子。然而在第二个生成的页面上显示了12个结果（最后2个是重复的）

//删除了url，因为问题解决了，我不想让sql注入

如果您转到上面的项目并查看帖子的第二页，则会显示条目，其中最后2个是第3页（和最后一页）的副本...发生了什么？！它们不应该出现，因为sql LIMIT函数应该将显示的帖子限制为10。

这是mainpage .php的代码

 <?php
session_start();
ob_start();

if ($_SERVER["REQUEST_METHOD"] == "POST"){//this works in my tests. 
  $low = 0;
  $high = 10; //this loop/if method works in conjunction with the code at the bottom of this page
  $e = 1;//starts at 1 because 1 itself is defined my default at the bottom of the page
  while($_SESSION['i'] != $e){
    $e++;

    if (isset($_REQUEST["p$e"])){
      $u = 1;
      while($u != $e){
      $u++;
        $low = $low + 10;
      $high = $high +10;
}


    }
  }}else{
    $low = 0;
    $high = 10;
  }
  ?>
<!doctype html>
<!-- AUTHOR:JOSH FAIRBANKS -->
<html lang="en">
<head>
  <meta charset="utf-8">
  <title>Home Page</title>
  <link rel="stylesheet" href="style.css">


</head>

<body>
<nav>
<ul>
<li><a href = "addPost.php"><div id = "new">Create new post</div></a></li>
<li><a href = "mainPage.php"><div id = "veiw">Veiw posts</div></a></li>
</ul>
</nav>
<main>
<?php 
       $link = mysqli_connect( 'localhost', 'username', 'password' );
mysqli_select_db( $link, 'mydatabasename' );

 $results = mysqli_query( $link, "SELECT LEFT(post, 575) as post FROM Users where verified = 1 ORDER BY `id` DESC LIMIT $low , $high" ); //this displayes all the posts that have been verified
while( $record = mysqli_fetch_assoc( $results ) ) {
$post = $record['post'];


$count = mysqli_affected_rows( $link );  
  //ORDER BY YEAR(Date) DESC, MONTH(Date) DESC, DAY(DATE) DESC
$post .= "</td></tr></table>";
print $post;


}
 $vresults = mysqli_query( $link, "SELECT post FROM Users where verified = 1" ); 
while( $vrecord = mysqli_fetch_assoc( $vresults ) ) {
$vpost = $vrecord['post'];


$vcount = mysqli_affected_rows( $link );  
$_SESSION['vcount'] = $vcount;
  // 
//these mirror variables arent seen and just are used to count the total amount of posts
//not just the ones on the page
}

mysqli_free_result( $results );
mysqli_close( $link );
?>
<form method = "post" action = "mainPage.php">
<table>
<tr><td>Page Number: </td><!--<td><input type = "submit" name = "p1" value = "1"></td>-->
<?php
$i = 0;
print "displaying low: $low high: $high";
for($j = 0; $j < $vcount; $j++) //modulus 
{

  if($j % 10 == 0)
  {
    $i++;
   $_SESSION['i'] = $i;
    print "<td><input type = 'submit' name ='"."p".$i. "' value = '$i'></td>"; 
  }
}  
?>
</tr>
  </table>  
</form>
</main>  
</body>
</html>

我知道这段代码有点混乱：但是我发誓它除了这个令人沮丧的问题外还有效。任何和所有帮助赞赏。

Answer 1

我猜你的问题在$ high变量...每页的记录总是不变的。但似乎你在一个地方增加。

if ($_SERVER["REQUEST_METHOD"] == "POST"){//this works in my tests. 
  $low = 0;
  $high = 10; //this loop/if method works in conjunction with the code at the bottom of this page
  $e = 1;//starts at 1 because 1 itself is defined my default at the bottom of the page
  while($_SESSION['i'] != $e){
    $e++;

    if (isset($_REQUEST["p$e"])){
      $u = 1;
      while($u != $e){
      $u++;
        $low = $low + 10;
      $high = 10;
}


    }
  }}else{
    $low = 0;
    $high = 10;
  }
  ?>

非常奇怪的发生mysql php博客

1 个答案: