2 回答

TA貢獻2041條經驗 獲得超4個贊
轉義反斜杠(使用\\or /):
INSERT INTO `cars`(`carID`, `carType`, `carModel`, `carYear`, `carBrand`, `carImage`, `carPrice`) VALUES (1, 'electric', 'LEAF', '2019', 'Nissan', '\\img\\Hybrids\\Leaf\\White\\Side.jpg', '29,990')
您可以使用 PDO 將值安全地插入數據庫。
$db = new PDO( $dsn, $username, $password );
$carImage = "\img\Hybrids\Leaf\White\Side.jpg";
$sql = $db->prepare("INSERT INTO cars (carImage) VALUES(:carImage)");
$sql->bindParam(:carImage, $carImage, PDO::PARAM_STR);
$sql->execute();

TA貢獻1877條經驗 獲得超6個贊
在插入發生之前將數據變量聲明為字符串,然后使用準備好的語句來創建記錄。*用于文件導航的正斜杠。
<?php
// Data variables
$carID = "1";
$carType = "electric";
$carModel = "LEAF";
$carYear = "2019"; // this column should be set to int as the year is a whole number
$carBrand = "Nissan";
$carImage = "/img/Hybrids/Leaf/White/Side.jpg"; // This column should be set to text so the slashes can be stored
$carPrice = "29990"; // This column should be set to float(7,2) which allows a max of 9999999.99
//Insert
$insert = mysqli_prepare($con, "insert into cars (carID,carType,carModel,carYear,carBrand,carImage,carPrice) values (?,?,?,?,?,?,?)");
mysqli_stmt_bind_param($insert, "sssssss", $carID,$carType,$carModel,$carYear,$carBrand,$carImage,$carPrice);
mysqli_stmt_execute($insert);
?>
- 2 回答
- 0 關注
- 252 瀏覽
添加回答
舉報