php - 将数据写入mysql

Question

1. 这是我的问题，我将数据写入mysql，但是当我输入时然后按提交按钮，从函数中获取控制台日志消息意味着一切都很好，但是当我查看数据库时没有什么可看的。能谁能帮帮我。
2. 我需要做的第二件事是从该数据库中选择数据，然后该数据 + 输入中的新数据 = 数据保存到数据库。

这是 html 代码:

<div class="body-content bg-1">
<div class="col-sm-12 col-xs-12" ng-controller="UnosUSkladisteCtrl">
    <div class="container">
    <div class="alert alert-info alert-dismissable"><strong>Info!</strong> {{data.message}}</div>
       <div class="center">
            <h1>Ulaz robe u skladište</h1>
        </div>

        <p ng-controller="LoginCtrl">Dobro došao <b>{{deName}}</b>  | <a id="logout" href ng-click="logout()">Odjava</a></p>

    </div>

        <a href="#/dashboard"><div class="nav-button center col-sm-4 col-xs-4">Povratak</div></a>


    <div>
         <form class="form-horizontal col-xs-12" col-sm-12" name="signUpForm" ng-submit="submitFormSignUp()" novalidate>

                <!-- Zlatni medvjed -->
                <div class="form-group" ng-class="">
                    <label class="col-sm-4 col-xs-12 control-label no-padding-right " for="zlatni_medvjed">Zlatni medvjed boca 0.5l</label>
                    <div class="col-sm-4 col-xs-12">
                        <span class="block input-icon input-icon-right">  
                            <input ng-model="zlatni_medvjed" placeholder="Količina boca 0.5l" type="number"  class="form-control">                        
                        </span>   
                    </div>
                </div>
                <!-- Crna kraljica -->
                <div class="form-group" ng-class="">
                    <label class="col-sm-4 col-xs-12 control-label no-padding-right " for="crna_kraljica">Crna kraljica boca 0.5l</label>
                    <div class="col-sm-4 col-xs-12">
                        <span class="block input-icon input-icon-right">  
                            <input ng-model="crna_kraljica" placeholder="Količina boca 0.5l" type="number"  class="form-control">                        
                        </span>   
                    </div>
                </div>
                <!-- Grička vještica -->
                <div class="form-group" ng-class="">
                    <label class="col-sm-4 col-xs-12 control-label no-padding-right " for="gricka_vjestica">Grička vještica boca 0.5l</label>
                    <div class="col-sm-4 col-xs-12">
                        <span class="block input-icon input-icon-right">  
                            <input ng-model="gricka_vjestica" placeholder="Količina boca 0.5l" type="number"  class="form-control">                        
                        </span>   
                    </div>
                </div>
                <!-- Dva klasa -->
                <div class="form-group" ng-class="">
                    <label class="col-sm-4 col-xs-12 control-label no-padding-right " for="dva_klasa">Dva klasa boca 0.5l</label>
                    <div class="col-sm-4 col-xs-12">
                        <span class="block input-icon input-icon-right">  
                            <input ng-model="dva_klasa" placeholder="Količina boca 0.5l" type="number"  class="form-control">                        
                        </span>   
                    </div>
                </div>

                <!-- SUBMIT BUTTON -->
                <label class="col-sm-4 control-label no-padding-right"></label>
                    <div class="col-sm-4">
                        <button ng-click="insertdata()" type="submit" class="btn btn-primary btn-lg btn-block">Unesi količine u skladište</button>
                    </div>
            </form> 
    </div>  

</div>

这是js文件代码:

 angular.module('angularLoginApp')
.controller('UnosUSkladisteCtrl', function($scope,$http) {

    $scope.insertdata = function(){
        $http.post("database/unos-piva.php", {'zlatni_medvjed':$scope.zlatni_medvjed, 'crna_kraljica':$scope.crna_kraljica, 'gricka_vjestica':$scope.gricka_vjestica, 'dva_klasa':$scope.dva_klasa })
        .success(function(data,status,headers,config){
            console.log("Podaci uspiješno spremljeni");
            alert("Nove količine piva su dodane u skladište");
        });
    }
    $scope.data = {message: "Molimo vas da točno navedete što unosite u skladište"};

});

这是用于连接的 PHP 文件代码:

<?php
$data = json_decode(file_get_contents("php://input"));
$zlatni_medvjed = mysql_real_escape_string($data->zlatni_medvjed);
$crna_kraljica = mysql_real_escape_string($data->crna_kraljica);
$gricka_vjestica = mysql_real_escape_string($data->gricka_vjestica);
$dva_klasa = mysql_real_escape_string($data->dva_klasa);

mysql_connect("localhost","root","");
mysql_select_db("medvedgrad");
mysql_query("INSERT INTO stanje_piva(`zlatni_medvjed`, `crna_kraljica`, `gricka_vjestica`,`dva_klasa`)VALUES('"$zlatni_medvjed"','"$crna_kraljica"','"$gricka_vjestica"','"$dva_klasa"')")
?>

mysql 列 zlatni_medvjed、crna_kraljica、gricka_vjestica、dva_klasa

Answer 1

插入语句的格式错误 - 您错误地使用了引号(单引号和双引号)并且语句未以分号终止。

mysql_query("
    INSERT INTO stanje_piva(`zlatni_medvjed`, `crna_kraljica`, `gricka_vjestica`,`dva_klasa`)
    VALUES('{$zlatni_medvjed}','{$crna_kraljica}','{$gricka_vjestica}','{$dva_klasa}')
    ");

也就是说，这个 sql 很容易受到 SQL 注入(inject)的攻击，并且您正在使用现已弃用的 mysql_* 类 - 将您的代码升级到 mysqli 或 PDO 并了解如何使用 Prepared statements

至于第二个问题，执行update stanje_piva ... set field=field+new data.... where id=1 等〜您不需要最初的select 声明