重复插入 MySQL

debugcn 发表于 Dev

本

我使用以下代码并WAMP在我的本地主机上测试它。

它工作正常并插入数据但是由于某种原因它创建了重复的行。

有没有理由让它出现两次？

<?php
require "conn.php";
$name =$_POST["name"];
$surname = $_POST["surname"];
$age = $_POST["age"];
$username = $_POST["username"];
$userpass = $_POST["password"];

$mysql_qry = "insert into employee_data(name, surname, age, username, password) values ('$name', '$surname', '$age', '$username', '$userpass')";

$result = mysqli_query($conn, $mysql_qry);

if ($conn->query($mysql_qry) === TRUE){
    echo "insert success";
}
else{
    echo "Error:" .$mysql_qry . "<br> " . $conn->error;
}
$conn->close();
?>

谢谢

里格斯愚蠢

是的，您运行查询两次，请参阅代码中的注释

<?php
require "conn.php";
$name =$_POST["name"];
$surname = $_POST["surname"];
$age = $_POST["age"];
$username = $_POST["username"];
$userpass = $_POST["password"];

$mysql_qry = "insert into employee_data
                        (name, surname, age, username, password) 
                values ('$name', '$surname', '$age', '$username', '$userpass')";

//ONCE HERE
$result = mysqli_query($conn, $mysql_qry);

//AND AGAIN HERE
if ($conn->query($mysql_qry) === TRUE){
    echo "insert success";
}
else{
    echo "Error:" .$mysql_qry . "<br> " . $conn->error;
}
$conn->close();
?>

此外，您的脚本对SQL 注入攻击非常开放即使您正在逃避输入，它也不安全！在或API 中使用准备好的参数化语句MYSQLI_PDO

使用准备好的和绑定的查询编码

<?php
require "conn.php";

$sql = "insert into employee_data
                        (name, surname, age, username, password) 
                values (?,?,?,?,?)";

$stmt = $conn-prepare($sql);
$stmt->bind_param('sssss', $_POST["name"],
                            $_POST["surname"];
                            $_POST["username"];
                            $_POST["password"];

if ( $stmt->execute() ){
    echo "insert success";
}else{
    echo "Error:" .$mysql_qry . "<br> " . $conn->error;
}
$conn->close();
?>