mysqli预处理语句详解

<?php
$servername = "localhost";
$username = "username";
$password = "password";
$dbname = "myDB";

// 创建连接
$conn = new mysqli($servername, $username, $password, $dbname);

// 检查连接
if ($conn->connect_error) {
    die("连接失败: " . $conn->connect_error);
}

// 预处理语句
$stmt = $conn->prepare("SELECT id, username FROM users WHERE username = ? AND password = ?");
$stmt->bind_param("ss", $username, $password);

// 设置参数并执行
$username = "admin";
$password = "password";
$stmt->execute();

// 绑定结果变量
$stmt->bind_result($id, $username);

// 获取结果
if ($stmt->fetch()) {
    echo "登录成功，用户ID: " . $id;
} else {
    echo "登录失败";
}

// 关闭语句和连接
$stmt->close();
$conn->close();
?>