php - 使用 PHP 查询 MySQL

Question

这段代码有什么问题:

$q = query("select * from users where email = '$_POST['email']' and name = '$_POST['name']'");

Parse error: parse error, expecting T_STRING' orT_VARIABLE' or `T_NUM_STRING' in C:\wamp\www\conn\index.php 第16行

提前致谢。

Answer 1

 $q = query("select * from users where email = '{$_POST['email']}' and name = '{$_POST['name']'}");

您漏掉了两个引号。还有:
1) 始终转义用户输入(对于 security reasons ):

$email = mysql_real_escape_string($_POST['email']);
$name = mysql_real_escape_string($_POST['name']);
$q = query("select * from users where email = '{$email}' and name = '{$name}'");

2) 得到一个带有代码高亮的编辑器，这样你以后就不会遇到类似的问题了。我推荐Notepad++ .