警告mysqli_real_escape_string（）的

Question

查詢：

if ($_SERVER["REQUEST_METHOD"]=="POST") { 

    $username = mysqli_real_escape_string(trim($_POST["username"]), $db); 
    $password = mysqli_real_escape_string(trim($_POST["password"]), $db); 
    $password = md5($password); 

    $sql = "Insert into login(username,password) values('$username','$password');"; 
    $result = mysqli_query($db,$sql); 
    echo"Successful Registration"; 

    if($result) { 
     echo("Successfully updated");  
    }else{ 
     die ("no database"); 
    } 
} 

錯誤：

Warning: mysqli_real_escape_string() expects parameter 1 to be mysqli, string given in C:\xampp\htdocs\test.php on line 14 

Warning: mysqli_real_escape_string() expects parameter 1 to be mysqli, string given in C:\xampp\htdocs\test.php on line 15 

Warning: mysqli_query() expects parameter 1 to be mysqli, resource given in C:\xampp\htdocs\test.php on line 19 

成功Registrationno數據庫

Answer 1

你的參數順序錯誤，請閱讀文件再次。例如：

$username = mysqli_real_escape_string(trim($_POST["username"]), $db); 

應該是：

$username = mysqli_real_escape_string($db, trim($_POST["username"])); 

爲正確的參數順序見http://php.net/mysqli_real_escape_string（程序風格）。