PHP:我无法使用脚本连接或将表单数据发送到 mySQL

Question

有人可以帮我调试这个脚本吗？

(*是信息，我知道，但没有发布)

<?php
$dbhost = '*********';
$dbuser = '*********';
$dbpass = '*********';
$conn = mysql_connect($dbhost, $dbuser, $dbpass);
if(!$connection) {
  die("Database connection failed: " . mysql_error());
}
$db_select = mysql_select_db("applicationinfo",$connection);
if (!$db_select) {
  die("Database selection failed:: " . mysql_error());
}
$retval = mysql_query( $sql, $conn );
if(! $retval )
{
  die('Could not enter data: ' . mysql_error());
}
echo "Entered data successfully\n";
mysql_close($conn);
$sql = 'INSERT INTO applicationinfo '.
       '(Name, Email, Email_confirmation, Activity, Quote, Username, Password,                Password_Confirmation, 13+) '.
   'VALUES ( "personal_name", "user_email", "user_email_confirmation", "user_activity", "user_quote", "user_username", "user_password", "user_password_confirmation", "user_13older",  NOW() )';

?>

这是运行脚本的网站: http://www.ProjectZilkr.com/apply.html

谢谢大家

Answer 1

您的操作顺序已关闭，下面是准备好的语句的示例，它应该比您正在使用的更安全。我还没有测试过代码，所以希望没有拼写错误等。

$dbhost = '*********';
$dbuser = '*********';
$dbpass = '*********';
$dbname = 'applicationinfo';

// Create connection
$conn = new mysqli($dbhost, $dbuser, $dbpass, $dbname);

// Check connection
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

// prepare and bind
$stmt = $conn->prepare("INSERT INTO applicationinfo (Name, Email, Email_confirmation, Activity, Quote, Username, Password, Password_Confirmation, `13+`) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)");

// first argument can be one of 4 types (i - integer, d - double, s - string, b - BLOB) You must have one of these for each parameter/field.
$stmt->bind_param("sssssssss", $name, $email, $email_conf, $activity, $quote, $username, $password, $password_conf, $one_three);

// set parameters and execute
$name = "Joe Snuffy";
$email = "joe.snuffy@example.com";
$email_conf = "joe.snuffy@example.com";
$activity = "Test";
$quote = "quote";
$username = "username";
$password = "password";
$password_conf = "pass conf";
$one_three = "yes";
$stmt->execute();

echo "New records created successfully";

$stmt->close();
$conn->close();