<select class="form-control" name="city"> <option value="0">Filter by City</option> <?php try { $pdo = new PDO(DBCONNSTRING,DBUSER,DBPASS); $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); $sql = "select geocities.AsciiName from geocities INNER JOIN travelimagedetails ON geocities.GeoNameID = travelimagedetails.CityCode group by geocities.GeoNameID"; $result = $pdo->query($sql); while ($row = $result->fetch()) { echo '<option value="'.$row['AsciiName'].'>'; echo $row['AsciiName'].'</option>'; } $pdo = null; } catch (PDOException $e) { die( $e->getMessage() ); } ?> </select> </div>輸出當我刪除第一個 PHP 標簽時一切正常但是當我添加它時一切都失敗了
1 回答
江戶川亂折騰
TA貢獻1851條經驗 獲得超5個贊
你應該嘗試頻繁使用PHP標簽，它會解決你難以清晰閱讀代碼的問題
<select class="form-control" name="city">
<option value="0">Filter by City</option>
<?php
try {
$pdo = new PDO(DBCONNSTRING,DBUSER,DBPASS);
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$sql = "select geocities.AsciiName from geocities INNER JOIN travelimagedetails ON geocities.GeoNameID = travelimagedetails.CityCode group by geocities.GeoNameID";
$result = $pdo->query($sql);
while ($row = $result->fetch()) {
?>
<option value="<?php echo $row['AsciiName']?>"> <?php echo $row['AsciiName']?> </option>;
<?php
}
$pdo = null;
}
catch (PDOException $e) {
die( $e->getMessage() );
}
?>
</select>
您應該使用準備好的語句來防止 SQL 注入
準備好的聲明
<select class="form-control" name="city">
<option value="0">Filter by City</option>
<?php
try {
$pdo = new PDO(DBCONNSTRING,DBUSER,DBPASS);
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$sql = "select geocities.AsciiName from geocities INNER JOIN travelimagedetails ON geocities.GeoNameID = travelimagedetails.CityCode group by geocities.GeoNameID";
// check if prepare statement worked well
if (!$query = $pdo->prepare($sql)) {
// error message
} else{ // successful prepared statement
//checking if query executed well
if ($query->execute()) {
$result = $query->fetchAll();
}
}
// checking if $result is alive
if (isset($result)) {
foreach ($result as $row) { ?>
<option value="<?php echo $row['AsciiName']?>"> <?php echo $row['AsciiName']?> </option>;
<?php //$pdo = null;
} // end foreach
} // end check result if
} // end Try
catch (PDOException $e) {
die( $e->getMessage() );
}
?>
</select>
- 1 回答
- 0 關注
- 145 瀏覽
添加回答
舉報
0/150
提交
取消