在線23

Question

我一直在嘗試寫代碼插入到不同的表，但它一直給我上線23

這是一個大學項目登記表錯誤SQL PHP形式的錯誤。

<?php 

$con = mysql_connect(","",""); 
if (!$con) 
{ 
die('Could not connect: ' . mysql_error()); 
} 

mysql_select_db("HNDGeorgeMason", $con); 

$firstname=$_POST['firstname']; 
$surname=$_POST['surname']; 
$username=$_POST['username']; 
$password=$_POST['password']; 
$address=$_POST['address']; 
$postcode=$_POST['postcode']; 
$userid=$_POST['userid']; 
$type=$_POST['type']; 

switch ($_POST['type']) 
{ 
case guides 
$sql="INSERT INTO Guides (firstname, surname, type, username, password) 
VALUES ('$firstname', '$surname', '$type', '$username', '$password')"; 

case parents 
$sql="INSERT INTO Parents (firstname, surn ame, type, username, password) 
VALUES ('$firstname', '$surname', '$type', '$username', '$password')"; 

case leaders 
$sql="INSERT INTO Leaders (firstname, surname, type, username, password) 
VALUES ('$firstname', '$surname', '$type', '$username', '$password')"; 
} 

mysql_close($con); 
?> 

Answer 1

在

• $con = mysql_connect(","","");
• 檢查你的代碼的情況：例如：case "guides"
• 永遠不要只需要插入您的$ _ POST沒有消毒的輸入（由於SQL Injection)使用ATLEAST mysqli_real_escape_string()
。

Answer 2

case "leaders": 
$sql="INSERT INTO Leaders (firstname, surname, type, username, password) 
VALUES ('$firstname', '$surname', '$type', '$username', '$password')"; 
break;