尝试使用PHP表单写入MySQL数据库

Question

我正在尝试使用PHP，通过HTML表单向数据库执行简单的写入操作。

我已经在数据库中运行了SQL查询，它工作得很好。但是，使用表单不起作用。我不知道为什么。有什么帮助吗？user/pass/db名称均正确。

<?php
if(isset($_POST['submit']))
{

$con = mysql_connect("localhost","delives0_ideas","ideas");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("delives0_ideas", $con);

mysql_query("INSERT INTO data (firstName, lastName, email, idea) VALUES ('$_POST['firstName']','$_POST['lastName']', '$_POST['email']', '$_POST['idea']')");

//also email it to us besides writing it into the database

mysql_close($con);
?>

<form method="post">
<strong>First name:</strong> <input type="text" name="firstName"/>
<br/>
<strong>Last name:</strong> <input type="text" name="lastName"/>
<br/>
<strong>Email:</strong> <input type="text" name="email"/>  #####Put a javascript checker for valid emails, like name@site.com format
<br/>
<br/>
<strong>Idea:</strong>
<br/>
<textarea rows="10" cols="30" name="idea"> 
Hit us with your best shot.
</textarea> 
<br/>
<input name="submit" type="submit" value="Submit"/>
</form>

Answer 1

​

您忘记了表单标记中的"action = nameofyourpage.php“。我会在查询的末尾添加一个"or die (mysql_error())“来检查请求的语法。

Answer 2

您的脚本中有几个错误-请检查以下内容

http://pastie.org/1056569

<?php
if(isset($_POST['submit']))
{
   $con = mysql_connect("localhost","delives0_ideas","ideas");
   if (!$con){
     die('Could not connect: ' . mysql_error());
   }

   mysql_select_db("delives0_ideas", $con);

   $sqlCmd = sprintf("INSERT INTO data (firstName, lastName, email, idea) 
     VALUES ('%s','%s','%s','%s')", 
      mysql_real_escape_string($_POST["firstName"]),
      mysql_real_escape_string($_POST["lastName"]),
      mysql_real_escape_string($_POST["email"]),
      mysql_real_escape_string($_POST["idea"]));

   mysql_query($sqlCmd);
   mysql_close($con);
 }
 ?>

 <form method="post">
  <strong>First name:</strong> <input type="text" name="firstName"/><br/>
  <strong>Last name:</strong> <input type="text" name="lastName"/><br/>
  <strong>Email:</strong> <input type="text" name="email"/> 
  <strong>Idea:</strong><br/>
  <textarea rows="10" cols="30" name="idea">Hit us with your best shot.</textarea><br/>
  <input name="submit" type="submit" value="Submit"/>
 </form>

Answer 3

您已经知道了为什么它不工作的问题的答案，但是在将此代码投入生产之前，请检查此article中有关SQL注入攻击的信息。