如何在只有一種形式

Question

HTML代碼添加在2表中的數據

<form method = "POST" action = "register.php"> 
    <div class = "register"> 
    <center> 
     <div class = "heading"></br> 
      <strong>--- REGISTER ---</strong></br></br> 
     </div> 
    </center> 

    <div class = "registration"> 

     First Name: <input type = "text" placeholder = "Enter First Name" name = "Cus_fname" style = "margin-left: 48px;" required></br></br> 
     Last Name: <input type = "text" placeholder = "Enter Last Name" name = "Cus_lname" style = "margin-left: 49px;" required></br></br> 
     Username: <input type = "text" placeholder = "Enter Username" name = "Cus_Uname" style = "margin-left: 55px;" required></br></br> 
     Password: <input type = "password" placeholder = "Enter Password" name = "Cus_Pword" style = "margin-left: 61px;" required></br></br> 
     Address: <input type = "text" placeholder = "Enter Address" name = "Cus_address" style = "margin-left: 67px;" required></br></br> 
     Contact No.: <input type = "text" placeholder = "Enter Contact Number" name = "Cus_contactnum" style = "margin-left: 38px;" required></br></br> 
     Email: <input type = "text" placeholder = "Enter E-mail Address" name = "Cus_email" style = "margin-left: 88px;" required></br></br> 

     <input type = "submit" name = "submit" value = "Submit" style = "margin-left: 110px;"></br> 

    </div></br> 
    </form> 

PHP代碼

<?php 
if(isset($_POST['submit'])){ 



    $cf = $_POST['Cus_fname']; 
    $cl = $_POST['Cus_lname']; 
    $cu = $_POST['Cus_Uname']; 
    $cp = $_POST['Cus_Pword']; 
    $ca = $_POST['Cus_address']; 
    $cn = $_POST['Cus_contactnum']; 
    $ce = $_POST['Cus_email']; 

    include("config.php"); 


    mysqli_query($con, "INSERT INTO account (Cus_ID, Cus_Uname, Cus_Pword) VALUES ('null', '$cu', '$cp')"); 
    mysqli_query($con, "INSERT INTO client (Cus_ID, Cus_lname, Cus_fname, Cus_address, Cus_contactnum, Cus_email) VALUES(null, '$cl', '$cf', '$ca', '$cn', '$ce')"); 

    mysqli_close($con); 
} 
?> 

的問題是，它只是在一個表中增加這是我的客戶表，並將其只1個數據添加到我的帳戶表中沒有比

林多使用MySQL工作臺爲我的數據庫

Answer 1

使用預準備語句可以防止SQL注入。檢查你所有的帖子有助於確保他們有一定的價值，如果需要。

<?php 
if(isset($_POST['submit'])){ 
    // Populate each variable 
    $cf = isset($_POST['Cus_fname'])?$_POST['Cus_fname']:""; 
    $cl = isset($_POST['Cus_lname'])?$_POST['Cus_lname']:""; 
    $cu = isset($_POST['Cus_Uname'])?$_POST['Cus_Uname']:""; 
    $cp = isset($_POST['Cus_Pword'])?$_POST['Cus_Pword']:""; 
    $ca = isset($_POST['Cus_address'])?$_POST['Cus_address']:""; 
    $cn = isset($_POST['Cus_contactnum'])?$_POST['Cus_contactnum']:""; 
    $ce = isset($_POST['Cus_email'])?$_POST['Cus_email']:""; 

    include("config.php"); 

    if ($stmt = $mysqli->prepare("INSERT INTO account (Cus_Uname, Cus_Pword) VALUES (?, ?, ?)")) { 
     // bind parameters for markers 
     $stmt->bind_param("sss", $cu, $cp); 
     // execute query 
     $stmt->execute(); 
     // close statement 
     $stmt->close(); 
    } 
    if ($stmt = $mysqli->prepare("INSERT INTO client (Cus_lname, Cus_fname, Cus_address, Cus_contactnum, Cus_email) VALUES (?, ?, ?, ?, ?)")) { 
     // bind parameters for markers 
     $stmt->bind_param("sssss", $cl, $cf, $ca, $cn, $ce); 
     // execute query 
     $stmt->execute(); 
     // close statement 
     $stmt->close(); 
    } 

    mysqli_close($con); 
} 
?> 

此代碼假定您的ID列使用自動遞增。在這種情況下，您不需要在INSERT中包含IS，它將在查詢運行時自動完成。

Answer 2

檢查您的帳戶表的查詢。

mysqli_query（$ CON， 「INSERT INTO帳戶（Cus_ID，Cus_Uname，Cus_Pword） VALUES（ '空'， '$銅'， '$ CP'）」）;

你已經把一個錯字「空」這是一個字符串到您的Cus_ID我假設的數據類型爲int，因爲它是一個ID。刪除單引號null，看看是否有效。