gpt4 book ai didi

php - 安全表数据输入 PHP/PDO/MySQL

转载 作者:行者123 更新时间:2023-11-29 03:07:17 25 4
gpt4 key购买 nike

<分区>

我正在尝试学习 PDO 的基础知识。我已经构建了以下将数据插入到我的表中的方法,但我想获得有关这是否安全或是否可以做得更好的反馈?

是否需要像使用 mysql_real_escape_string() 那样转义我的 post 变量?

$firstname = $_POST['First_Name'];
$surname = $_POST['Surname'];
$nicknames = $_POST['Nicknames'];
$age = $_POST['Age'];


// Connection data (server_address, database, name, poassword)
$hostdb = 'localhost';
$namedb = 'tsite_co_uk';
$userdb = 'access@site.co.uk';
$passdb = 'password';

try {
// Connect and create the PDO object
$conn = new PDO("mysql:host=$hostdb; dbname=$namedb", $userdb, $passdb);
$conn->exec("SET CHARACTER SET utf8"); // Sets encoding UTF-8
$conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

// Define an insert query
$sql = "INSERT INTO `directory`

(`First_Name`,`Surname`,`Nicknames`,`Age`)

VALUES ('$firstname','$surname','$nicknames','$age')

";

$count = $conn->exec($sql);

$conn = null; // Disconnect
}
catch(PDOException $e) {
echo $e->getMessage();
}

25 4 0
Copyright 2021 - 2024 cfsdn All Rights Reserved 蜀ICP备2022000587号
广告合作:1813099741@qq.com 6ren.com