PHP - 通過網址識別用戶ID

Question

我有3個按鈕來排列我的用戶。 Admin，Member和一個禁用它們的按鈕。所以現在我想用$_GET的「url-id」來標識它們。但是當我這樣做時，我得到一個錯誤：

Parse error: syntax error, unexpected '' (T_ENCAPSED_AND_WHITESPACE), expecting identifier (T_STRING) or variable (T_VARIABLE) or number (T_NUM_STRING).

我該如何解決這個問題？我感謝每一個幫助！

<?php 
include_once('connection.php'); 
if (isset($_POST['ban'])) { 
    $sql = "UPDATE 
      t_user_info 
     SET 
      user_level = 3 
     WHERE 
      id = $_GET['id']"; 

$query = $conn->prepare($sql); 
$query ->execute(array('user_level' => $user_level)); 

session_unset(); 
session_destroy(); 
header('Location: /PHP/index.php?page=ban'); 
} 
if (isset($_POST['admin_btn'])) { 
$sql = "UPDATE 
      t_user_info 
     SET 
      user_level = 1 
     WHERE 
      id  = $_GET['id']"; 

$query = $conn->prepare($sql); 
$query ->execute(); 
header('Location: /PHP/index.php?page=admin'); 

} 

if (isset($_POST['member_btn'])) { 
$sql = "UPDATE 
      t_user_info 
     SET 
      user_level = 2 
     WHERE 
      id  = $_GET['id']"; 

$query = $conn->prepare($sql); 
$query ->execute(); 
header('Location: /PHP/index.php?page=member'); 

} 

?> 

Answer 1

您的更新查詢出現語法錯誤，而且您沒有綁定正確的值。試試這個：

<?php 
include_once('connection.php'); 
if (isset($_POST['ban'])) { 
    $sql = "UPDATE 
      t_user_info 
      SET user_level = 3 
      WHERE id = :id"; 

    $query = $conn->prepare($sql); 
    $query ->execute(array(':id'=>$_GET['id'])); 

    session_unset(); 
    session_destroy(); 
    header('Location: /PHP/index.php?page=ban'); 
    exit; 
} 

if (isset($_POST['admin_btn'])) { 
    $sql = "UPDATE 
      t_user_info 
      SET user_level = 1 
      WHERE id = :id"; 

    $query = $conn->prepare($sql); 
    $query ->execute(array(':id'=>$_GET['id'])); 
    header('Location: /PHP/index.php?page=admin'); 
    exit; 
} 

if (isset($_POST['member_btn'])) { 
    $sql = "UPDATE t_user_info 
      SET user_level = 2 
      WHERE id = :id"; 

    $query = $conn->prepare($sql); 
    $query ->execute(array(':id'=>$_GET['id'])); 
    header('Location: /PHP/index.php?page=member'); 
    exit; 
} 

?>