在网址中ID不正确

时间:2012-03-29 10:54:34

标签: php mysql

我的mysql中的外键有问题。 用户中的主键(id)应该是语言表中的user_id。 更新的代码:

CREATE TABLE IF NOT EXISTS `users` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `md5_id` varchar(200) NOT NULL,
  `full_name` tinytext CHARACTER SET latin1 COLLATE latin1_general_ci NOT NULL,
  `user_name` varchar(10) NOT NULL,
  `user_email` varchar(30) NOT NULL,
  `user_level` tinyint(4) NOT NULL DEFAULT '1',
  `pwd` varchar(220) NOT NULL,
  `nationality` varchar(30) NOT NULL,
  `department` varchar(20) NOT NULL,
  `birthday` date NOT NULL,
  `date` date NOT NULL DEFAULT '0000-00-00',
  `users_ip` varchar(200) NOT NULL,
  `activation_code` int(10) NOT NULL DEFAULT '0',
  `banned` int(1) NOT NULL,
  `ckey` varchar(200) NOT NULL,
  `ctime` varchar(220) NOT NULL,
  `approved` int(1) NOT NULL DEFAULT '1',
  PRIMARY KEY (`id`)
) ENGINE=InnoDB  DEFAULT CHARSET=latin1 AUTO_INCREMENT=3 ;

CREATE TABLE `language` (
 `id` int(11) NOT NULL AUTO_INCREMENT,
 `user_id` int(11) NOT NULL,
 `native` varchar(30) NOT NULL,
 `other` varchar(30) NOT NULL,
 `other_list` varchar(9) NOT NULL,
 `other_read` varchar(9) NOT NULL,
 `other_spokint` varchar(9) NOT NULL,
 `other_spokprod` varchar(9) NOT NULL,
 `other_writ` varchar(9) NOT NULL,
   PRIMARY KEY (`id`),
   KEY `user_id` (`user_id`)
 ) ENGINE=InnoDB  DEFAULT CHARSET=latin1 AUTO_INCREMENT=9 ;

当我登录应用程序时,在URL中ID正确(id1)= myaccount.php?id ='%20.%201%20。' 但是,当我转到language.php并返回时,网址已更改为myaccount.php?id ='%20.%203%20。'

因此语言表中的用户ID为1时应为1!

Php代码:

$result = mysql_query("SELECT `id` FROM `users` WHERE `banned` = '0' ORDER BY 
`id`  DESC");
$err = array();
if(isset($_SESSION['user_id']))  {  }
if (!empty($_POST['doLanguage']) && $_POST['doLanguage'] == 'Submit')
{

list($id) = mysql_fetch_row($result);

session_start();
// this sets variables in the session
$_SESSION['user_id'] = $id;
foreach($_POST as $key => $value)

$stamp = time();
$ckey = GenKey();
mysql_query("update users set `ctime`='$stamp', `ckey` = '$ckey' where id='$id'") 
or  die(mysql_error());

//set a cookie

if(isset($_POST['remember'])){
    setcookie("user_id", $_SESSION['user_id'], time()+60*60*24*COOKIE_TIME_OUT, "/");
    setcookie("user_key", sha1($ckey), time()+60*60*24*COOKIE_TIME_OUT, "/");
    setcookie("user_name",$_SESSION['user_name'], time()+60*60*24*COOKIE_TIME_OUT, "/");
}


if(empty($err)) {
for($i = 0; $i < count($_POST["other"]); $i++)
{

$native = mysql_real_escape_string($_POST['native'][$i]);
 $other = mysql_real_escape_string($_POST['other'][$i]);
  $other_list = mysql_real_escape_string($_POST['other_list'][$i]);
   $other_read = mysql_real_escape_string($_POST['other_read'][$i]);
    $other_spokint = mysql_real_escape_string($_POST['other_spokint'][$i]);
     $other_spokprod = mysql_real_escape_string($_POST['other_spokprod'][$i]);
      $other_writ = mysql_real_escape_string($_POST['other_writ'][$i]);
  $sql_insert = "INSERT into `language`
(`user_id`,`native`,`other`,`other_list`,`other_read`, `other_spokint`
,`other_spokprod`,`other_writ`  )
VALUES
('$id','$native','$other','$other_list','$other_read','$other_spokint',
'$other_spokprod','$other_writ') ";

mysql_query($sql_insert,$link) or die("Insertion Failed:" . mysql_error());     
}

header("location: myaccount.php?id=" . $_SESSION['user_id']. "");
exit();
    } 

1 个答案:

答案 0 :(得分:0)

我没有阅读所有内容,但我发现这里存在很大问题:

header("Location: myaccount.php?id=' . $_SESSION[user_id] .'");

由于:

  • 你不一致地混合使用单引号和双引号字符串
  • 您使用常量(user_id)而不是字符串(user_id
  • 访问表索引'user_id'

尝试改为:

header('Location: myaccount.php?id='.$_SESSION['user_id']);