MySQL更新语句将无法执行

Question

Can somebody help me with this? When i'm trying to update my table nothing happens and I can't figure out what's wrong. I've tried different query's but not 1 worked.

My code: http://pastebin.com/8zDpm0Ah it doesn't work from line 23

<?php

foreach($db->query("SELECT * FROM blog WHERE ID LIKE '$ID'") as $row){

    echo "Titel: <input type='text' size='50' name='titel' value='$row[titel]'><br>";
    echo "Post:<br>";
    echo "<textarea name='editblog'>";
    echo $row[post];
    echo "</textarea>";

    echo "<input type='hidden' name='ID' value='";
    echo $row[ID];
    echo "'>";
}
?>

<input type="submit" value="Edit post" name="postedit">
</form>
<script>
CKEDITOR.replace( 'editblog' );
</script>
<?php

if(isset($_POST['postedit'])){
    $titel = $_POST['titel'];
    $post = $_POST['editblog'];
    $ID = $_POST['ID'];

    $STH = $db->prepare("UPDATE blog SET titel='$titel',post='$post' WHERE ID=$ID");  
    $STH->execute();
    echo "<h2>Post edited!</h2>";
}

Answer 1

If you aren't using prepared statements as they were intended (using $db->bind_params() ), then I recommend switching line 29 to

$STH = $db->query("UPDATE blog SET titel='$titel',post='$post' WHERE ID=$ID");  

and removing line 30.

Answer 2

You are not at all using parameterized queries, switching to PDO, does not mean only changing mysql_query() to $db->prepare() It is a little bit more than that. while using PDO, you can't place every variable in your query, I am talking about this code:

$STH = $db->prepare("UPDATE blog SET titel='$titel',post='$post' WHERE ID=$ID");  
                                $STH->execute();

The values, $title, $post and $id need to be replaced as ? in your query, and later can be executed.

So, try the following.:

if(isset($_POST['postedit'])) {
     $title = $_POST['titel'];
     $post = $_POST['editblog'];
     $id = $_POST['ID'];
    try {
    $STH = $db->prepare("UPDATE blog SET titel = ?, post = ? WHERE ID = ? ");  
    $STH->execute(array($title, $post, $id));
    } catch(PDOExeption $e){
     echo 'The error is: '. $e->getMessage();
    }
    if($STH->rowCount() > 0){
       echo 'data updated successfuly';
    }else{
       echo 'data updating failed';
    }
}

Debugging:

    <?php
    $title = 'I am post title';
    $post = 'I am POST';
    $id = '17';

    try {
    new PDO("mysql:host=localhost;dbname=addictus_db", "addictus_admin", "dikketetten");
    $STH = $db->prepare("UPDATE blog SET titel = ?, post = ? WHERE ID = ? ");  
    $STH->execute(array($title, $post, $id));
    } catch(PDOExeption $e){
     echo 'The error is: '. $e->getMessage();
    }