PHP使用mysql插入数据

Question

我是PHP的新手，我刚刚学习了一段时间。我做了一些表单，在提交时，它将在mysql表中插入新的数据。我似乎找不出这个问题。这是我的密码：

<form method="post">
        <table border='2' cellpadding=4 cellspacing=1 width=50% bgcolor=white align=center >
        <br>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Master No.:</td>
                <td class="td-center"><input type="text" name="master_no" /></td>
            </tr>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Alacarte No.:</td>
                <td class="td-center"><input type="text" name="alacarte_no" /></td>
            </tr>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Dessert No.:</td>
                <td class="td-center"><input type="text" name="dessert_no" /></td>
            </tr>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Pasta No.:</td>
                <td class="td-center"><input type="text" name="pasta_no" /></td>
            </tr>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Rice No.:</td>
                <td class="td-center"><input type="text" name="rice_no" /></td>
            </tr>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Wine No.:</td>
                <td class="td-center"><input type="text" name="wine_no" /></td>
            </tr>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Member ID:</td>
                <td class="td-center"><input type="text" name="member_id" /></td>
            </tr>

            <tr>
                <td>&nbsp;</td>
                <td class="td-center">
                    <input type="submit" name="submit" value="Add"/>
                    <input type="Reset"/>
                    <a href="member-profile.php">
                        <input type="button" name="home" value="home"/>
                    </a><br>
                </td>
            </tr>
        </table>
        <?php   

            if (isset($_POST['submit'])) {
                $conn = mysql_connect('localhost', 'root', '');
                 if (!$conn)
                {
                 die('Could not connect: ' . mysql_error());
                }
                mysql_select_db("thesis_sofitel", $conn);

                $master_no=$_POST['master_no'] ;
                $alacarte_no= $_POST['alacarte_no'] ;   
                $dessert_no= $_POST['dessert_no'] ;
                $pasta_no= $_POST['pasta_no'] ; 
                $rice_no= $_POST['rice_no'] ;
                $wine_no= $_POST['wine_no'] ;   
                $member_id= $_POST['member_id'] ;

                mysql_query("INSERT INTO `master_list`(master_no,alacarte_no,dessert_no,pasta_no,rice_no,wine_no,member_id) 
                            VALUES ('$master_no','$alacarte_no','$dessert_no','$pasta_no','$rice_no','$wine_no','$member_id')"); 

                $message = "I was here!!!";
                echo "<script type='text/javascript'>alert('$message');</script>";

            }           
        ?>
    </form>

Answer 1

修复了代码中的一些bug，并将其更改为mysqli。这一点现在应该奏效了：

1)在您的表单中提供了一个action属性，在您的例子中是action = ""。

2) echo值，以了解它们是否真的被获取。尽管如此，这仍然很容易被SQL注入。阅读更多here，了解准备好的语句为什么/如何提供帮助。

<?php   
    if (isset($_POST['add-submit'])) {
     $con=mysqli_connect("localhost","root","your_pass_here","thesis_sofitel");

    if (mysqli_connect_errno())
     {
       echo "Failed to connect to MySQL: " . mysqli_connect_error();
     }

        echo        $master_no=$_POST['master_no'] ;
        echo        $alacarte_no= $_POST['alacarte_no'] ;   
        echo        $dessert_no= $_POST['dessert_no'] ;
        echo        $pasta_no= $_POST['pasta_no'] ; 
        echo        $rice_no= $_POST['rice_no'] ;
        echo        $wine_no= $_POST['wine_no'] ;   
        echo        $member_id= $_POST['member_id'] ;

$success = mysqli_query($con,"INSERT INTO `master_list`(master_no,alacarte_no,dessert_no,pasta_no,rice_no,wine_no,member_id) 
                            VALUES ('$master_no','$alacarte_no','$dessert_no','$pasta_no','$rice_no','$wine_no','$member_id')");

                            if($success){
                $message = "I was here!!!";
                echo "<script type='text/javascript'>alert('$message');</script>";
                            }
                            else
                                echo "Query Failed.";

mysqli_close($con);

            }           
        ?>

HTML：

<form method="post" action = "">
        <table border='2' cellpadding=4 cellspacing=1 width=50% bgcolor=white align=center >
        <br>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Master No.:</td>
                <td class="td-center"><input type="text" name="master_no" /></td>
            </tr>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Alacarte No.:</td>
                <td class="td-center"><input type="text" name="alacarte_no" /></td>
            </tr>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Dessert No.:</td>
                <td class="td-center"><input type="text" name="dessert_no" /></td>
            </tr>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Pasta No.:</td>
                <td class="td-center"><input type="text" name="pasta_no" /></td>
            </tr>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Rice No.:</td>
                <td class="td-center"><input type="text" name="rice_no" /></td>
            </tr>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Wine No.:</td>
                <td class="td-center"><input type="text" name="wine_no" /></td>
            </tr>
            <tr>
                <td><font face=rockwell font size=5 font color=black>Member ID:</td>
                <td class="td-center"><input type="text" name="member_id" /></td>
            </tr>

            <tr>
                <td>&nbsp;</td>
                <td class="td-center">
                    <input type="submit" name="add-submit" value="Add"/>
                    <input type="Reset"/>
                    <a href="member-profile.php">
                        <input type="button" name="home" value="home"/>
                    </a><br>
                </td>
            </tr>
        </table>

    </form>

编辑：

上面的代码可以工作，为了澄清它，我亲自测试了它。下面是附图。

​

​

​

​

​

​

第二次编辑：

要向OP显示，如果他将该列更改为INT类型，它仍然可以工作：

​