【发布时间】:2015-05-17 12:56:18
【问题描述】:
我是 PHP 新手,已经学习了一个在线教程,到目前为止我一直工作正常,但现在我的数据库没有返回查询,但是当我去 PHPmyadmin 那里时,我可以让查询正常工作。
下面是代码
<?php
ob_start();
//Delete Item question to admin and delete product
include"../storescripts/connect_to_mysql.php";
if (isset($_GET['deleteid'])) {
echo 'Do you really want to delete the item with ID '.$_GET['deleteid'].'?<a href="inventory_list.php?yesdelete='.$_GET['deleteid'].'">Yes</a>|<a href="inventory_list.php">No</a>';
exit();
}
if(isset($_GET['yesdelete'])){
// Delete the actual product and delete picture also
//delete from database
//$id_to_delete = $_GET['yesdelete'];
//echo $id_to_delete;
$sql =mysqli_query( "DELETE * FROM `products` WHERE `id`=2 LIMIT1 ");
//mysql_query("DELETE * FROM `products` WHERE `id`='$id_to_delete'LIMIT1") or (mysql_error());
//mysqli_query("DELETE * FROM products WHERE id=`$id_to_delete`LIMIT1");// or (mysql_error());
//Unlink file from server
$pictodelete=("../inventory_images/$id_to_delete");
//echo $pictodelete;
if(file_exists($pictodelete)){
unlink($pictodelete);
}
header("location:inventory_list.php");
exit();
}
?>
非常感谢您的帮助,我的服务器读取 PHP Extension :mysqli 。
【问题讨论】:
-
LIMIT1应该是LIMIT 1,带有一个空格... -
危险:你容易受到SQL injection attacks的影响,你需要自己去defend。 危险:此代码是vulnerable to XSS。用户输入在插入 HTML 文档之前需要转义!
标签: php mysql mysqli phpmyadmin