所以即時嘗試做什麼應該看起來可能是一個非常簡單的平凡任務。我試圖檢查我的數據庫中的電子郵件地址。我不知道我是否在正確的軌道上,有人能把我掐死嗎?檢查在MySQL數據庫中的電子郵件地址db
$query = "SELECT * FROM 68_users WHERE email= $email";
if($result = mysqli_query($link, $query) == $email) {
echo 'Email has been registered';
}else{
$query = "INSERT INTO 68_users (email,pass,old_pass,first_name,last_name,dob,gender,phone,fanmail)
VALUES ('$email',AES_ENCRYPT('$pass', 'something'),AES_ENCRYPT('$pass', 'something'),'$first_name','$last_name','$dob','$gender','$phone','$fanmail')"
or die(mysqli_error());
if (!mysqli_query($link, $query)) {
echo 'error: '.mysqli_error($link);
exit();
}
}
mysqli_close($link);
}
謝謝大家的幫助。我需要弄清楚php的調試情況。現在,我在Eclipse和調試我的網站上寫的,十分令人氣憤..這是我用什麼:
$query = "SELECT * FROM 68_users WHERE email= '$email'";
$result = mysqli_query($link, $query);
if($result->num_rows > 0) {
echo 'This email has previously been registered';
}else{
$query = "INSERT INTO 68_users (email,pass,old_pass,first_name,last_name,dob,gender,phone,fanmail)
VALUES ('$email',AES_ENCRYPT('$pass', 'something'),AES_ENCRYPT('$pass', 'something'),'$first_name','$last_name','$dob','$gender','$phone','$fanmail')"
or die(mysqli_error());
if (!mysqli_query($link, $query)) {
echo 'error: '.mysqli_error($link);
exit();
}
header('Location: http://www.example.com/html/thankyou.html') ;
}
如果您運行它,會發生什麼情況? –
'WHERE email = $ email'至少需要'WHERE email ='$ email'',你不應該使用'AES_ENCRYPT'作爲密碼,因爲它是可逆的,我猜你很容易被SQL注入。 – ceejayoz
在這裏使用準備好的語句 - 會讓你的生活更輕鬆 – ethrbunny