PHP如何編碼（轉義）@，用於電子郵件驗證？

Question

我得到這個錯誤：

Error Number: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '@gmail.com' at line 1

下面的代碼：

$email = $this->input->post('email'); 

       $checkEmail = $this->crud_model->retrieve_where('employee', 'email', 'email', $email); 

crud_model：

function retrieve_where($table, $table_id, $table_name, $value) { 
     $table = $this->db->query('Select * FROM ' . $table . ' Where ' . $table_id . ' = ' . $value); 
     $records = array(); 
     foreach ($table->result() as $row) { 
      $records[] = $row->$table_name; 
     } 
     return $records; 
    } 

Answer 1

您嘗試執行的查詢是：

SELECT * FROM Email WHERE Email = email@email.com

電子郵件在這種情況下是一個字符串，並且需要引用一個字符串。

function retrieve_where($table, $table_id, $table_name, $value) { 
    $table = $this->db->query("Select * FROM " . mysql_real_escape_string($table) . " Where " . mysql_real_escape_string($table_id) . " = '" . mysql_real_escape_string($value) ."'"); 
    $records = array(); 
    foreach ($table->result() as $row) { 
     $records[] = $row->$table_name; 
    } 
    return $records; 
} 

不要忘了跳過您的查詢mysql_real_escape_string()。它會保護你免受注射。