php - HTML/PHP/SQL - 带参数的查询

Question

这是我的代码:

<form action="" method="post">
        <fieldset>
            Date 1: <input type="text" name="date1">
            Date 2: <input type="text" name="date2">
        </fieldset>
            <button type="submit" name="Search">
    </form>

    <?php
    try {
        $db = new PDO('mysql:host=localhost;dbname=db;charset=utf8', 'user', 'pass');
        $db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
    } catch (Exception $e) {
        echo "DB is down";
        exit; 
    }

    try {
        $results = $db->query("SELECT * FROM instructor WHERE date_hired BETWEEN ? AND ?"); 
    } catch (Exception $e) {
        echo "No data found";
        exit;
    }

    echo "<pre>";
    var_dump($results->fetchAll(PDO::FETCH_ASSOC));

    ?> 

如何更改 PHP 代码以使用我创建的表单来获取参数？

我希望能够在表单中输入 2 个日期，所以它进入查询，然后输出结果。

Answer 1

改变这一行:

$results = $db->query("SELECT * FROM instructor WHERE date_hired BETWEEN ? AND ?");

到

$results = $db->prepare("SELECT * FROM instructor WHERE date_hired BETWEEN ? AND ?");
$results->execute(array($_POST['date1'], $_POST['date2']));

另外，这里有一个很好的链接可以帮助您入门:

http://wiki.hashphp.org/PDO_Tutorial_for_MySQL_Developers