php - 如何批准待处理记录？

Question

我正在开发一个视频托管网站，其中用户上传的视频(称为“答案”，因为它们是为了响应爱好制作方面的帮助请求而制作的)被放入待处理列表中，以供网络管理员查看审查并决定是否批准公开观看。

所有视频记录都有一个名为“approved”的 bool 数据，该数据设置为 true (“1”) 或 false (“0”)。

我遇到的问题是实际的审批流程。无论我做什么，我都无法设置视频的“已批准”状态。

这是我编写的代码...

answer.php(主视频页面)

<a class="btn btn-success btn-lg btn-block" href="<?php echo url_for('/approve.php?id=' . h(u($answer['id']))); ?>"><i class="mr-2 fas fa-check fa-2x"></i>Approve</a>

approve.php

    if(!isset($_GET['id'])) {
      redirect_to(url_for('/pending.php'));
    }
    $id = $_GET['id'];


    if(is_post_request()) {

      $answer = [];
      $answer['id'] = $id;
      $answer['approved'] = $_POST['approved'];

      $result = approve_answer($id);
      $_SESSION['message'] = '<div class="text-success">The answer was successfully approved and ready for public viewing.</div>';  
      redirect_to(url_for('/pending.php'));

    } else {
      $answer = find_answer_by_id($id);
      $user = find_user_by_id($answer['user_id']);
    }

    ?>
    <?php $page_title = 'Confirm Approval'; ?>
    <?php include(SHARED_PATH . '/public_header.php'); ?>


    <div class="container my-2">
        <div class="my-2">
        <a class="back-link my-2" href="<?php echo url_for('/answer.php?id=' . h(u($answer['id']))); ?>"><i class="mr-2 fas fa-arrow-circle-left fa-2x"></i> Back to Answer</a>
        </div>

      <div class="answer approve">
        <h1>Confirm Approval</h1>
        <p>Are you sure you want to approve this answer?</p>
          <p class="item"><strong><?php echo h($answer['title']); ?></strong> by <emphasis><?php echo h($user['username']); ?></emphasis></p>
          <p><italics><?php echo h($answer['content']); ?></italics>

        <form action="<?php echo url_for('/approve.php?id=' . h(u($answer['id']))); ?>" method="post">
          <div id="operations">
            <input type="hidden" name="approved" value="1" />
            <input class="btn btn-success btn-lg btn-block" type="submit" name="approved" id="approved" value="Confirm" />
          </div>
        </form>
      </div>

    </div><!-- container -->

函数approve_answer (query_functions.php)

function approve_answer($answer) {
    global $db;

    $errors = validate_answer($answer);
    if(!empty($errors)) {
      return $errors;
    }


    $sql = "UPDATE answers SET ";
    $sql .= "approved='" . db_escape($db, '1') . "', ";
    $sql .= "WHERE id='" . db_escape($db, $answer['id']) . "' ";
    $sql .= "LIMIT 1";

    $result = mysqli_query($db, $sql);
    // For UPDATE statements, $result is true/false
    if($result) {
      return true;
    } else {
      // UPDATE failed
      echo mysqli_error($db);
      db_disconnect($db);
      exit;
    }

  }

那么我哪里出错了？

Answer 1

替换下面的代码即可查询。

$sql = "UPDATE answers SET ";
$sql .= "approved='" . db_escape('1') . "', ";
$sql .= "WHERE id='" . db_escape($answer['id']) . "' ";
$sql .= "LIMIT 1";