SQL查询不适用于准备好的语句PHP

时间:2020-05-12 18:02:34

标签: php mysql prepared-statement

我正在尝试创建一个基本的php注册表格,但是我不知道为什么它不起作用。它一直向我显示sql的if语句的错误“ error = sqlerror3” ,并且只是没有在表中插入值。

这是我的桌子(idTmp具有auto_increment):

CREATE TABLE `users_tmp` (
  `idTmp` int NOT NULL,
  `ipUser` varbinary(17) NOT NULL,
  `cellUser` int NOT NULL,
  `placeUser` longtext NOT NULL,
  `uidUsers` longtext NOT NULL,
  `emailUsers` longtext NOT NULL,
  `pwdUsers` longtext NOT NULL,
  `dataUser` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
  `stateUser` longtext NOT NULL
) ENGINE=MyISAM DEFAULT CHARSET=latin1;

数据库连接dbh.inc.php:

<?php

$servername = "localhost";
$username = "root";
$password = "123Ciuronay";
$dbname = "icproducoes_users";

$conn = mysqli_connect($servername, $username, $password, $dbname);

if (!$conn){
    die("Connection failed: " .mysqli_connect_error());
}

Php代码:

<?php


if(isset($_POST['registo'])){
    require 'dbh.inc.php';

$username = mysqli_real_escape_string($conn, $_POST['uid']);
$email = $_POST['email'];
$residencia = $_POST ['res'];
$tel = $_POST['tel'];
$check = $_POST['check1'];

//GETS THE IP

$ip = $_SERVER['REMOTE_ADDR'];

// GENEREATES RANDOM PASSOWRD
function genPassword($length = 6) {
    $chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
    $count = mb_strlen($chars);

    for ($i = 0, $result = ''; $i < $length; $i++) {
        $index = rand(0, $count - 1);
        $result .= mb_substr($chars, $index, 1);
        $result = strtoupper($result);
    }
    return $result;
}


$password = genPassword();

if(isset($check)){
$check = "YES";

} else {$check = "NO";}



// INSERTS THE VALUES ON DATABASE
$stateUser = "Active";
$sql = "INSERT INTO users_tmp (`ipUser`, `cellUser`, `placeUser`, `uidUsers`, `emailUsers`, `pwdUsers`, `advertising`, `dataUser`, `stateUser`) VALUES ( ?, ?, ?, ?, ?, ?, ? , now(), ?)";

$stmt = mysqli_stmt_init($conn);
if(!mysqli_stmt_prepare($stmt, $sql)){
    header("Location: ../registo-gratis.php?error=sqlerror3");
    exit();

} else {

    mysqli_stmt_bind_param($stmt, "ssssssss",  $ip , $tel, $residencia, $username, $email, $password, $check, $stateUser);
    mysqli_stmt_execute($stmt);
}
}
else{

    echo'  <script>setTimeout(function () {    
        window.location.href = "../registo-gratis.php"; 
    },5000);</script>";';
}
?>

1 个答案:

答案 0 :(得分:0)

在INSERT查询中,您试图修改advertising列,该列在CREATE TABLE查询中不存在。结果,mysqli_stmt_prepare看到您试图写入不存在的列并返回错误。