php - 从数据库验证中选择列表

Question

我将衷心感谢您为解决此错误所做的努力。 从数据库中进行了选择(下拉列表)。当下拉列表起作用时(如它所示) 我是正常形式。)，我无法正确验证。或者我不知道有什么错误。 如果我从列表中选择一个国家/地区，它会按照表格中的条件给出错误(请选择业务总部国家/地区)

这里是表格:

    <form method="post" action="<?php echo htmlentities($_SERVER['PHP_SELF']);?>"  />
Country of Residence of Business' Head Office<br />
<select name="country_location" class="select">
<option> Select Country</option>
<?php
include('inc/mysqli_connect.php');
$q ="SELECT id, CONCAT_WS('', country) FROM country ORDER BY country ASC";
$r =  mysqli_query($dbc, $q);
if(mysqli_num_rows($r) > 0){
while ($row = mysqli_fetch_array($r, MYSQLI_NUM)){
echo "<option value=\"$row[0]\"";
// check for stickyness
if(isset($_POST['country']) && ($_POST['country']==$row[0])) echo'country="country"';
echo ">$row[1]</option>\n";
}
}
mysqli_close($dbc);
 ?>
</select><br />
<input type="hidden" name="submitted" value="TRUE" /><br />
<input type="submit" name="submit" value="Register"  id="submit"/>
</div>
</form>

然后验证

  <?php
  require_once('inc/config_inc.php');
  $page_title = 'Register';

include('inc/session.html');
if(isset($_POST['submitted'])){
  require_once ('inc/mysqli_connect.php');
  $trimmed =array_map('trim', $_POST);
  $business_name=$country_location=$business_city=$nature_of_business=$email=$telephone=$director_last_name=$director_first_name=$password=FALSE;

if(isset($_POST['country_location']) && ($_POST['country_location'] == 'country') && ($_POST['country'] > 0)){
 $country_location = (int)$_POST['country'];
 }
 else{
 $country_location = FALSE; 
 echo'<p class="error">Please select business\' head office country!</p>';
  }
   if($business_name && $country_location && $business_city && $nature_of_business && $email 
   && $telephone && $director_last_name && $director_first_name && $password){
   "SELECT registration_id FROM users WHERE email='$email' ";
   $q = mysqli_query($dbc, $q) or trigger_error("Query: $q\n<br /> MYSQL Error:
   ".mysqli_error($dbc));
   if(mysqli_num_rows($r) == 0){
   $a = md5(uniqid(rand(), true));

   $q = "INSERT INTO registration( business_name,country_location,business_city,nature_of_business,email,telephone,director_last_name,director_first_name, ,password ,active,registration_date) 
                                VALUES
( '$business_name', '$country_location', '$business_city' ,'$nature_of_business', '$email', '$telephone', '$director_last_name','$director_first_name','$active','SHA1($password)' NOW())";

$r = mysqli_query($dbc, $q) or trigger_error("Query: $q\n<br \> MySQL Error:     ".mysqli_error($dbc));

if(mysqli_affected_rows($dbc) ==1){  // send email
$body =" Thank you for registering at....You are guaranteed customer statifaction!. To activate your account, please click on this lin:\n\n";
$body .=BASE_URL .'activate.php?x='.urlencode($email) . "&y=$a"; mail($trimmed
['email'], 'Registration Confirmation', $body, 'From: example.com');
echo'<h3 > Thank you for registering! A confirmation email has been sent to your email address. Click on the link in that email to activate your account.</h3>';

include('inc/footer.php');
exit();
}
else{ 
echo'<p class="error"> You could not be registered due to a system error. We apologise for any inconvinience.</p>';
}
}
else{ echo'<p class="error"> The email address entered has been registered.if you have forgotten your password, click link to <a href="recover_password.php">recover your password</a></p>';
}
} 
else{ echo'<p class = "error">Please re-enter your password and try again.</p>';
}mysqli_close($dbc);
}
  ?>

数据库:

数据库名称:users 表名:国家/地区。 rows:id (int), value(国家名称), Country(国家名称)

请注意，表单中有很多字段，我只指出了关注字段，因此可以看到验证。

另请注意，我是一个绝对的新开发人员，也是这个论坛的新开发者。因此我可能 违反了规则。请纠正我而不是侮辱我，我将永远接受纠正。

提前致谢!

Answer 1

在您的表单中，您有 <select name="country_location"> ，然后为每个 <option> 设置值到每个国家/地区的 ID ( echo "<option value=\"$row[0]\""; )。 这意味着当表单被发布时， $_POST['country_location'] 的值是所选国家/地区 ID。

在验证中，您检查以下内容:

if(isset($_POST['country_location']) && ($_POST['country_location'] == 'country') && ($_POST['country'] > 0)){

但是怎么能$_POST['country_location']有值“国家”吗？它应该持有该国家/地区的身份证。 您尝试设置<option country="country"> ，但这行不通。只有<option value>将通过 POST 发送。

如果您将上述行更改为:

if(isset($_POST['country_location']) && ctype_digit($_POST['country_location']) && ($_POST['country'] > 0)){

ctype_digit 检查值是否仅由数字组成。请参阅PHP: ctype_digit - Manual了解更多信息。因为我希望您的 ID 是数字，所以这应该可以解决问题。