我有一個類似戳的應用程序,它似乎沒有插入到表'pokes'中。插入代碼使得沒有插入php
儘管我的代碼看起來很好看,它似乎沒有顯示任何標誌? 任何想法?
if (@$_POST['poke']) {
$check_if_poked = mysql_query("SELECT * FROM pokes WHERE user_to='$username' AND user_from='$added_by'");
$num_poke_found = mysql_num_rows($check_if_poked);
if ($num_poke_found == 1) {
echo "Come on! Give the guy a chance!";
}
else
if ($username == $cookie) {
echo "You cannot Jab yourself.";
}
else
{ $poke_user = mysql_query("INSERT INTO pokes VALUES ('', '$cookie', '$username')") or trigger_error(mysql_error());
echo "$username has been jabbed.";
}
}
從哪裏開始......請不要使用mysql_ *'函數,因爲它們在[deprecation process](http://news.php.net/php.internals/53799)中。改爲使用[MySQLi](http://php.net/manual/en/book.mysqli.php)或[PDO](http://php.net/manual/en/book.pdo.php),[be一個更好的PHP開發人員](http://jason.pureconcepts.net/2012/08/better-php-developer/)。 –
請閱讀[SQL注入](http://php.net/manual/en/security.database.sql-injection.php)並修復你的代碼。 –