php - 检查 SQL PHP 上的两列是否匹配

Question

我有一个表单，用户必须在其中输入他们的预订 ID 和姓氏。如果这两个值在数据库中匹配，那么我需要从数据库返回相应的值。

我有两个文件，一个是我使用ajax的html文件，另一个是php文件。单击按钮时，没有返回任何内容，我没有看到任何特定错误，并且我确信我输入的值是正确的。

<script>
var ajax = getHTTPObject();

function getHTTPObject()
{
    var xmlhttp;
    if (window.XMLHttpRequest) {
      // code for IE7+, Firefox, Chrome, Opera, Safari
      xmlhttp=new XMLHttpRequest();
    } else if (window.ActiveXObject) {
      // code for IE6, IE5
      xmlhttp=new ActiveXObject("Microsoft.XMLHTTP");
    } else {
      //alert("Your browser does not support XMLHTTP!");
    }
    return xmlhttp;
}

function updateCityState()
{
    if (ajax)
    {
        var reservation_id = document.getElementById("reservation_id").value;
          var guest_last_name = document.getElementById("guest_last_name").value;

        if(reservation_id)
        {

            var param = "?reservation_id=" + reservation_id + "&guest_last_name=" + guest_last_name;
var url = "test04.php";

            ajax.open("GET", url + param, true);
            ajax.onreadystatechange = handleAjax;
            ajax.send(null);

        }
    }
}
function handleAjax()                                                                                                                           
{
  if (ajax.readyState == 4)
   {
        var guest_full_name = document.getElementById('guest_full_name');

            var unit_number = document.getElementById('unit_number');

    var floor = document.getElementById('floor');

        var key_sa = document.getElementById('key_sa');




    if(!!ajax.responseText) {
      var result = JSON.parse(ajax.responseText);
      if(!!result){
         guest_full_name.innerHTML  = (!!result.guest_full_name) ? result.guest_full_name : '';

             unit_number.innerHTML = (!!result.unit_number) ? result.unit_number : '';


        floor.innerHTML = (!!result.floor) ? result.floor : '';


        key_sa.innerHTML = (!!result.key_sa) ? result.key_sa : '';
      } 
    }
   }
 }
</script>



<p id='employee_name'></p>
<p id='employee_age'></p>
<p id='safe_code'></p>

我的test04.php

<?php

$conn = mysqli_connect("","","","");

$reservation_id = mysqli_real_escape_string($conn, $_GET['reservation_id']);
$guest_last_name = mysqli_real_escape_string($conn, $_GET['guest_last_name']);

$query = "SELECT reservation_id, guest_full_name, guest_last_name unit_number, floor, key_sa FROM reservations2 INNER JOIN guest ON (reservations2.reservation_id=guest.reservation_idg) INNER JOIN unit USING (unit_id) where reservation_id ='".$reservation_id."'AND guest_last_name ='".$guest_last_name."";


 $result = mysqli_query($conn, $query) or die(mysql_error());
$response = array();

if(mysqli_num_rows($result) > 0) {
    while($row = mysqli_fetch_assoc($result)) {



        $response['guest_full_name'] = ($row['guest_full_name'] != '') ? $row['guest_full_name'] : '';
         $response['unit_number'] = ($row['unit_number'] != '') ? $row['unit_number'] : '';

             $response['floor'] = ($row['floor'] != '') ? $row['floor'] : '';
        $response['key_sa'] = ($row['key_sa'] != '') ? $row['key_sa'] : '';



    }
}
echo  json_encode($response, true); 


?>

Answer 1

I am not seeing any specific errors

• 你在看哪里？
• 您是否检查了 PHP 脚本的原始响应，或者只是查看了浏览器中呈现的内容？
• 您是否确认错误日志记录正常工作并检查了日志？

您的 PHP 逻辑不清楚 - 您的 JSON 数据和 PHP 数组无法处理多条记录，但您却处理多条记录。正确实现 REST 会很好。这还应该应用身份验证并使用 CSRF 来确保安全 - 但我假设您出于说明目的而忽略了这些。

您的代码不是为了处理故障或丢失数据而编写的。考虑(注意与您发布的内容的所有差异):

<?php

$conn = mysqli_connect("","","","");
$response = array();

$reservation_id = mysqli_real_escape_string($conn, $_GET['reservation_id']);
$guest_last_name = mysqli_real_escape_string($conn, $_GET['guest_last_name']);

$query = "SELECT reservation_id, guest_full_name
  , guest_last_name unit_number, floor, key_sa 
  FROM reservations2 
  INNER JOIN guest 
  ON (reservations2.reservation_id=guest.reservation_idg) 
  INNER JOIN unit USING (unit_id) 
  WHERE reservation_id ='".$reservation_id."'
    AND guest_last_name ='".$guest_last_name."";
$result = mysqli_query($conn, $query);
if (!$result) {
      $response['status']=503
      $response['msg']="Error";
      trigger_error(mysql_error());
      finish($response);
      exit;
}

$response['status']=200;
$response['msg']='OK';
$response['guest_full_name'] = htmlentities($_GET['guest_last_name']);
$response['reservations']=array();

while($row = mysqli_fetch_assoc($result)) {
    $response['reservations'][]=array(
           'unit_number'=>$row['unit_number'],
           'floor'=>$row['floor'],
           'key_sa'=>$row['floor_sa']);
  }
}
finish($response);
exit;

function finish($response)
{
    header("HTTP/1.1 $response[status] $response[msg]");
    header("Content-type: application/json");
    echo  json_encode($response, true); 
}