php - MySQL 到 MySQLi 的转换 php 形式

Question

我的表单通过过时的 MySQL 与数据库连接时遇到了一个问题。我正在尝试根据在线资源和我自己的知识将其转换为 MySQLi，但它似乎并没有成功。我已经检查了 stackoverflow ( How to solve Mysql to mysql as I have some problems )，它确实涵盖了某些点的转换，但由于我有一些额外的功能，我不太知道如何去做。另外，使用 MySQLi 时还需要 striplashes 函数吗？非常感谢您的帮助和时间，脚本如下:

    <?php

    if($_POST['formSubmit'] == "Submit") 
    {
        $errorMessage = false;

        if(empty($_POST['formName'])) 
        {
            $errorMessage = true;
        }
        if(empty($_POST['formEmail'])) 
        {
$errorMessage = true;       }
        if(empty($_POST['formAddress'])) 
        {
$errorMessage = true;       }
    if(empty($_POST['formPrice'])) 
        {
$errorMessage = true;    }


    $varName = $_POST['formName'];
        $varEmail = $_POST['formEmail'];
        $varAddress = $_POST['formAddress'];
    $varPrice = $_POST['formPrice'];
        $varComments = $_POST['formComments'];

         if($errorMessage == false) 
        {

         $db = mysql_connect("","","");
      if(!$db) die("Error connecting to MySQL database.");
      mysql_select_db("" ,$db);

            $sql = "INSERT INTO formdata (name, email, address, price, comments) VALUES (".
                            PrepSQL($varName) . ", " .
                            PrepSQL($varEmail) . ", " .
                            PrepSQL($varAddress) . ", " .
              PrepSQL($varPrice) . ", " .
                            PrepSQL($varComments) . ")";
            mysql_query($sql);

            header("Location: thankyou.php");
            exit();
        }
    }

   //sql injection protection..
    function PrepSQL($value)
    {

        if(get_magic_quotes_gpc()) 
        {
            $value = stripslashes($value);
        }


        $value = "'" . mysql_real_escape_string($value) . "'";

        return($value);
    }


?>

我的连接部分可以正常工作，但它没有写入数据库，所以我认为查询部分出错了。

Answer 1

只是基本的改变:

$link = mysqli_connect('localhost','root','pass','myDB');
if (!$link) {
 die('Could not connect: ' . mysqli_connect_error());
}

$sql= "INSERT INTO keypairs (name, email, address, price, comments) VALUES ('$varName','$varEmail','$varAddress','$varPrice','$varComments')";
if (!mysqli_query($link,$sql)) {
  //error ...
}