Question

我尝试在进行MySQL mysqli_real_escape_string查询之前同时使用trim和INSERT。我的代码如下：

<?php
$fname = mysqli_real_escape_string($dbc, trim($_POST['fname']));
$sname = mysqli_real_escape_string($dbc, trim($_POST['sname']));
$occ = mysqli_real_escape_string($dbc, trim($_POST['occ']));
$twitter = mysqli_real_escape_string($dbc, trim($_POST['twitter']));
$email = mysqli_real_escape_string($dbc, trim($_POST['email']));
$skype = mysqli_real_escape_string($dbc, trim($_POST['skype']));
$topic1 = mysqli_real_escape_string($dbc, trim($_POST['topic1']));
$topic2 = mysqli_real_escape_string($dbc, trim($_POST['topic2']));
$topic3 = mysqli_real_escape_string($dbc, trim($_POST['topic3']));
$avoid1 = mysqli_real_escape_string($dbc, trim($_POST['avoid1']));
$avoid2 = mysqli_real_escape_string($dbc, trim($_POST['avoid2']));
$avoid3 = mysqli_real_escape_string($dbc, trim($_POST['avoid3']));
$cr = mysqli_real_escape_string($dbc, trim($_POST['cr']));

if ((!empty($fname)) && (!empty($sname)) && (!empty($email)) && (!empty($topic1))) {
    $dbc = mysqli_connect('host', 'user', 'password', 'database') or die('Error connecting to MySQL server');
    $query = "INSERT INTO initial_details (fname, sname, occ, twitter, email, skype, topic1, topic2, topic3, avoid1, avoid2, avoid3, cr) VALUES ('$fname', '$sname', '$occ', '$twitter', '$email', '$skype', '$topic1', '$topic2', '$topic3', '$avoid1', '$avoid2', '$avoid3', '$cr')";
    $result = mysqli_query($dbc, $query);
    if (!$result) {
        mysqli_close($dbc);
        echo 'Duplicate';
    } else {
        mysqli_close($dbc);
        echo 'Success - entry added';
    }
} else {
    echo 'Error';
}   
?>

使用上面的代码，我收到了“错误”消息，但如果我删除mysqli_real_escape_string()并使用trim，我就能成功插入我的条目。

为什么我在这种情况下无法使用mysqli_real_escape_string()？

Answer 1

$dbc = mysqli_connect必须在所有mysqli_real_escape_string次调用之前才能使其正常工作。这是因为您需要一个有效的mysqli连接才能使用该功能。

Answer 2

您必须先连接到您的数据库打开错误报告也有帮助。

Answer 3

create or replace PROCEDURE duplicate_ticket ( i_RowID IN Varchar2 )AS BEGIN INSERT INTO main_table ( programname, partnumber ) SELECT programname, partnumber FROM main_table WHERE id = i_RowID; END duplicate_ticket;必须在所有$dbc = mysqli_connect调用之前，以使其起作用。这是因为您需要活动的mysqli连接才能使用该功能。这是什么意思。需要更详细吗？

mysqli_real_escape_string无法正常工作

3 个答案: