php - 从单选按钮内部检索查询结果

Question

我正在尝试从此单选按钮回显或打印查询结果:

<input type="radio" name="Query" value="SELECT employees.name FROM employees, department WHERE employees.department_deptID=department.deptID AND department.departName="Information Technology""> List all employees in a particular department (Information Technology).<br />

我当前使用的代码是这样的:

if ($_POST['submit'] == "submit" && isset($_POST['Query'])){
$query = $_POST['Query'];
$result = mysql_query($query);
print $query;
while($row = mysql_fetch_assoc($result)){
    foreach($row as $cname => $cvalue){
        print "$cname: $cvalue\t";
    }
    print "\r\n";
}
    }

除了其他一些单选按钮之外，我还有一个提交按钮来启动操作:

<input type="submit" name="submit" value="submit">

预先感谢您的帮助。

Answer 1

尝试以下 block :

<input type="radio" name="Query" value="SELECT employees.name FROM employees, department WHERE employees.department_deptID=department.deptID AND department.departName='Information Technology'"> List all employees in a particular department (Information Technology).<br />

我已将 department.departName='Information Technology' 处的 " 替换为 '

注意:这整个逻辑对我来说看起来很糟糕。您正在从浏览器传递查询，这会导致高风险。还使用 mysqli_* 函数并停止使用 mysql_* 函数