php - MySql Update 语句不更新数据库

Question

我对 PHP 编码很陌生，尽管我做了一些研究(大量的研究)，但我似乎看不到我的查询语句的问题。似乎有很多方法可以编写查询，我有点迷失在这里。请注意，我可能没有最好的 php 编码技术。我还尝试了 Msqli 准备/执行语法，但根本没有发生任何事情，而且我收到了错误消息，它甚至没有输入我的 if 语句来检查修改的行数，因此我可能会坚持使用当前执行的语法并记录我的 SuccessDB.log 和 FailDB.log。至少我知道它试图做到这一点。

在我的应用程序中，我有一个 Paypal IPN 监听器页面。一旦 Paypal 发送请求，我就可以处理它，但只能处理一半。有一次，我验证了所有 IPN 变量都正常并且付款已完成并验证，我需要更新数据库中的发票表。这是失败的最终处理更新。

我连续两天尝试了各种代码/查询，现在我不知所措。如有帮助，我们将不胜感激。

有问题的 UPDATE 语句(摘自整个代码):

$sql2 = "UPDATE payment_invoice SET p_user_name='$full_name', p_user_address='$address_and_state', p_user_postalcode='$address_zip', p_user_country='$address_country', p_datetime='$dateConverted', p_payment_completed='$p_payment_completed', p_user_email='$payer_email', p_paypal_txn_id='$txn_id' WHERE p_unique_invoice_id='$item_number'";

if ($conn->query($sql2) === TRUE) {
    error_log(date('[Y-m-d H:i e] ') ."\r\n". "RECORDS UPDATED", 3, "./SuccessDB.log");
} else {        
    error_log(date('[Y-m-d H:i e] ') ."\r\n". "FAILED UPDATE", 3, "./FailDB.log");
}
$conn->close();

宇宙的所有细节(全部/部分代码):

<?php
$host="localhost"; // Host name
$username="myusername"; // Mysql username
$password="mypass"; // Mysql password
$db_name="mydbname"; // Database name
$conn = null;

//Connect to server and select database.
$conn = new mysqli($host, $username, $password, $db_name);

if ($conn->connect_errno) {
    error_log($conn->connect_errno, 3, "error_log.txt");
}

//**ADD CURL CODE HERE**
//CURL code to catch paypal IPN request and Code to post validate back to paypal
//I will skip this lenghty code, as the problem doesn't occur here

$tokens = explode("\r\n\r\n", trim($res));
$res = trim(end($tokens));

if (strcmp ($res, "VERIFIED") == 0) {

    //Initialize variables/Post variables    
    $payment_status = $_POST['payment_status'];
    $transactionOK = false;
    $p_total_amount = 0;
    $p_payment_completed = 0;
    $receiver_email = $_POST['receiver_email'];
    $txn_id = $_POST['txn_id'];
    if ($_POST['mc_gross'] != NULL){
        $payment_amount = floatval ($_POST['mc_gross']);
    }
    else{
        $payment_amount = floatval ($_POST['mc_gross1']);
    }
    $item_number = $_POST['item_number'];
    $payment_currency = $_POST['mc_currency'];
    $reason_code = $_POST['reason_code'];
    $pending_reason = $_POST['pending_reason'];
    $payment_type = $_POST['payment_type']; 
    $payer_id = $_POST['payer_id'];
    $payer_status = $_POST['payer_status'];
    $first_name = $_POST['first_name'];
    $last_name = $_POST['last_name'];
    $full_name = $first_name." ".$last_name;
    $address_zip = $_POST['address_zip'];
    $address_country = $_POST['address_country'];
    $address_state = $_POST['address_state'];
    $address_street = $_POST['address_street'];
    $address_and_state = $address_street.", ".$address_state;
    $payer_email = $_POST['payer_email'];
    //Represent the unique random ID we created on click of buy button
    $item_number = $_POST['item_number'];
    date_default_timezone_set('PST'); 
    $payment_date = $_POST['payment_date'];  
    $dateTime = strtotime($payment_date);
    $dateConverted = date('Y-m-d H:i:s', $dateTime);    
    $query = null;
    $query_update = null;    
    $statement = null;
    $statement_update = null;
    $p_paypal_txn_id = "";    
    $res = null;
    $results_update = null;
    $nrows = null;

    //Check to see if payment amount is higher than regular price of item
    //We do this to detect if a user/hacker tried to tamper with page variables and try to buy
    if($payment_amount > "21.95"){

        //Check to see if payment is Completed, if payment type is instant and if currency is Canadian dollar
        if($payment_status == "Completed" && $payment_type == "instant" && $payment_currency == "CAD"){

            //THIS STATEMENT WORKS, THE CODE ENTERS THE ELSE STATEMENT AS INTENDED
            //Check to see if the transaction ID has already been processed in my database
            $sql = "SELECT * FROM payment_invoice WHERE p_paypal_txn_id=$txn_id";
            if ($conn->query($sql) === TRUE) {
                error_log(date('[Y-m-d H:i e] ') ."\r\n". "TNX EXIST", 3, "./TnxAlreadyExist.log");
            }
            } else {

                try{
                    $p_payment_completed = 1;

                    //This is the problematic statement
                    $sql2 = "UPDATE payment_invoice SET p_user_name='$full_name', p_user_address='$address_and_state', p_user_postalcode='$address_zip', p_user_country='$address_country', p_datetime='$dateConverted', p_payment_completed='$p_payment_completed', p_user_email='$payer_email', p_paypal_txn_id='$txn_id' WHERE p_unique_invoice_id='$item_number'";

                    if ($conn->query($sql2) === TRUE) {
                        error_log(date('[Y-m-d H:i e] ') ."\r\n". "RECORDS UPDATED", 3, "./SuccessDB.log");
                    } else {        
                        error_log(date('[Y-m-d H:i e] ') ."\r\n". "FAILED UPDATE", 3, "./FailDB.log");
                    }
                    $conn->close();
                }
                catch(Exception $e){
                    error_log(date('[Y-m-d H:i e] ') ."\r\n". "FAILED UPDATE".$e->getMessage(), 3, "./FailDBMSG.log");
                }
            }
            $conn->close();
        }
    }
}
else if (strcmp ($res, "INVALID") == 0) {
    // log for manual investigation
    // Add business logic here which deals with invalid IPN messages
    if(DEBUG == true) {
        error_log(date('[Y-m-d H:i e] '). "Invalid IPN: $req" . PHP_EOL, 3, LOG_FILE);
    }
}

?>

数据库详细信息:

p_user_name = varchar(800) / string
p_user_address = varchar(4000) / string (I know it's a lot of chars..)
p_user_postalcode = varchar(50) / string
p_user_country = varchar(500) / string
p_datetime = datetime
p_payment_completed = tinyint / boolean 1/0
p_unique_invoice_id = varchar(25) / string
p_user_email = varchar(100) / string
p_paypal_txn_id = varchar(50) / string

Answer 1

不需要将查询字符串连接在一起吗？就这样:

$sql2 = "UPDATE payment_invoice SET p_user_name='".$full_name."' WHERE p_unique_invoice_id='".$item_number."'";

我认为您正在做的事情是尝试使用变量名称作为键而不是实际值进行更新。