我正在嘗試使用以下代碼制作一個 php 搜索框，但是當我按下提交時，它會在 wallname 中顯示所有三個條目，而不是與搜索相關的條目。php:if (isset($_POST['submit-search'])){ $searchq= $_POST['search-input']; $query = mysqli_query($conn, "SELECT wallname FROM walldb WHERE wallname LIKE '%$searchq%'"); $result= mysqli_num_rows($query); if ($result = 0){ echo "error search"; } else{ while($row = mysqli_fetch_assoc($query)){ $name = $row['wallname']; $output = '<div>'.$name.'</div>'; print ("$output"); } }}html: <form action= "" method= "post"> <button type= "submit" name="submit-search">Search</button> <input id="search" name="search-input" type="text" placeholder="Search By Name" autocomplete="off"><a href="#"><img id="cancle" src="/images/cancle.png"></a> </form>在搜索框中輸入內容并按搜索后的結果：win7-haystackwin10-icelandwin10-road
1 回答
波斯汪
TA貢獻1811條經驗 獲得超4個贊
由于有很多關于使用prepared statements和PDO的評論，下面給出一個使用PDO的解決方案：
在此處閱讀有關 PDO的更多信息
$dsn = "mysql:host=YOUR_MYSQL_HOST;dbname=YOUR_DATABASE_NAME;charset=utf8mb4";
$options = [
PDO::ATTR_EMULATE_PREPARES => false, // turn off emulation mode for "real" prepared statements
PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION, //turn on errors in the form of exceptions
PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC, //make the default fetch be an associative array
];
try {
$pdo = new PDO($dsn, "username", "password", $options);
} catch (Exception $e) {
error_log($e->getMessage());
exit('Could not connect to the database.');
}
$arr = [];
$searchq = "%{$_POST['search-input']}%";
$stmt = $pdo->prepare("SELECT wallname FROM walldb WHERE wallname LIKE ?");
$stmt->execute([$searchq]);
while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
$arr[] = $row;
}
if(!$arr) exit('No results found');
print_r($arr);
額外閱讀：一篇關于使用 PDO 防止 SQL 注入的文章
- 1 回答
- 0 關注
- 114 瀏覽
添加回答
舉報
0/150
提交
取消