php - createAction不使用jtable向数据库PHP插入数据

Question

我正在使用 jtable 来帮助用户管理联系表单，但是我无法使用 CreateAction.php 将数据插入到 mysql 表中首页代码如下:

<script type="text/javascript">
            $(document).ready(function () {
                $('#PersonTableContainer').jtable({
                    title: 'Contact list',
                    actions: {
                        listAction: '/Pipit/assets/php/list.php',
                        createAction: '/Pipit/assets/php/createAction.php',
                        updateAction: '/Pipit/assets/php/edit.php',
                        deleteAction: '/Pipit/assets/php/delete.php'
                    },
                    fields: {
                        personID: {
                            key: true,
                            list: false
                        },
                        name: {
                            title: 'name',
                        },
                        group: {
                            title: 'group',
                        },
                        phone: {
                            title: 'number',
                        }
                    }
                });

createAction.php 文件如下:

    //Insert record into database
$insert=mysql_query("INSERT INTO pipit_contacts (name, group, phone) VALUES('" . $_POST["name"] . "', '" . $_POST["group"] . "', ".$_POST['phone']."");

//Get last inserted record (to return to jTable)
$result = mysql_query("SELECT * FROM pipit_contacts ORDER BY  personID DESC ");
$row = mysql_fetch_array($result);

//Return result to jTable
$jTableResult = array();
$jTableResult['Result'] = "OK";
$jTableResult['Record'] = $row;
print json_encode($jTableResult);

Answer 1

有语法错误"', ".$_POST['电话'].""); => 我应该是 "','".$_POST['phone']."'");//如果是 int 就可以了

您可能需要使用 mysql_escape_string() 删除其中的任何特殊字符。