php - 使用 MYSQLI 转义字符串的 Codeigniter

Question

我目前正在更新使用mysql的代码部分，当前转义字符串的结构如下:$product_name = mysql_real_escape_string(trim($_POST['product_name'])); 并且工作正常。

我的问题是，当我将上述字符串更改为 $product_name = mysqli_real_escape_string($database, (trim($_POST['product_name']))); 并声明以下内容时: $database = $this->load->database(); 在它上面我收到错误，它是 NULL

如何使用 CI 转义字符串？

Answer 1

CodeIgniter user manual写了以下内容。

Beyond simplicity, a major benefit to using the Active Record features is that it allows you >to create database independent applications, since the query syntax is generated by each >database adapter. It also allows for safer queries, since the values are escaped >automatically by the system.

您可以在 Controller 中使用输入类。

$this->load->model('mymodel');
$something = $this->input->post('something');
$results = $this->mymodel->mymethod($something);

在你的模型中

$this->db->insert('mytable', $data);