PHP MySQL 帖子表单

Question

所以我一整天都在努力解决这个问题。我似乎无法将任何内容发布到我的表格中，我也不知道为什么。

我已经构建了一个表单，其中包含为 _POST 传输的所有值。任何指示都会很棒。

elseif ($request == 'POST') {

include 'header_post.php'; include 'topmain.php';

$fname = $_POST['fname'];
$lname = $_POST['lname'];
$dlnum = $_POST['dlnum'];
$dob = $_POST['dob'];
$address = $_POST['address'];
$city = $_POST['city'];
$state = $_POST['state'];
$zip = $_POST['zip'];
$phone = $_POST['phone'];
$height = $_POST['height'];
$weight = $_POST['weight'];
$hair = $_POST['hair'];
$eyes = $_POST['eyes'];
$ethnicity = $_POST['ethnicity'];
}
$query3 = "insert into ".$db_prefix."customer_det (fname, lname, dlnum, dob, address, city, state, zip, phone, height, weight, hair, eyes, ethnicity) 
           values ('".$fname."', '".$lname."', '".$dlnum."', '".$dob."', '".$address."', '".$city."', '".$state."', 
           '".$zip."', '".$phone."', '".$height."', '".$weight."', '".$hair."', '".$eyes."', '".$ethnicity."')";

Answer 1

在 PHP 中使用 MySQL 连接:

mysql_connect('DB_HOST','DB_USER','DB_PASS');
@mysql_select_db('DB_NAME');
$query='insert into ...';
mysql_query($query);

但是您的查询容易受到SQL注入(inject)，建议您使用MySQLi扩展。

    $mysql = new mysqli('DB_HOST', 'DB_USER', 'DB_PASS', 'DB_NAME');
    $query = 'insert into customer_det (
        fname,
        lname,
        dlnum,
        .......
    ) values (?,?,?,....,?)';
    $statement = $mysql->prepare($query);
    $statement->bind_param('sss...', //How many ever fields are there, those many sssss. For Integer use i. s is for string fields. Example ssssisssi....
        $fname,
        $lname,
        $dlnum,
        .....);
    $statement->execute();
    $statement->close();
    $mysql->close();