无法在XAMPP中使用php更新MYSQL数据库表字段
[英]Unable to update MYSQL database table fields using php in XAMPP
问题描述
So, I am trying to design a php website, and so far it works well in terms of adding an entry to the list table. 
因此，我正在尝试设计一个php网站，到目前为止，在将条目添加到列表中方面，它都能很好地工作。
The problem is, it isnt able to update the table using edit.php . 问题是，它无法使用edit.php 更新表。 When the edit link is clicked it shows a message: 单击编辑链接后，它会显示一条消息：
"There is no data to be edited."
But if I try to manually put localhost/edit.php**?id=1** it shows the id numbered list and works fine. 但是，如果我尝试手动放置localhost/edit.php**?id=1**它会显示ID编号列表，并且可以正常工作。 Please help. 请帮忙。
home.php home.php
<html>
<head>
<title>My first PHP Website</title>
</head>
<?php
session_start(); //starts the session
if($_SESSION['user']){ // checks if the user is logged in
}
else{
header("location: index.php"); // redirects if user is not logged in
}
$user = $_SESSION['user']; //assigns user value
?>
<body>
<h2>Home Page</h2>
<hello>!
<!--Display's user name-->
<a href="logout.php">Click here to go logout</a><br/><br/>
<form action="add.php" method="POST">
Add more to list: <input type="text" name="details" /> <br/>
Public post? <input type="checkbox" name="public[]" value="yes" /> <br/>
<input type="submit" value="Add to list"/>
</form>
<h2 align="center">My list</h2>
<table border="1px" width="100%">
<tr>
<th>Id</th>
<th>Details</th>
<th>Post Time</th>
<th>Edit Time</th>
<th>Edit</th>
<th>Delete</th>
<th>Public Post</th>
</tr>
<?php
mysql_connect("localhost","root","") or die(mysql_error());
mysql_select_db("first_db") or die("Cannot connect to database");
$query = mysql_query("select * from list");
while($row = mysql_fetch_array($query))
{
print "<tr>";
print '<td align="center">'. $row['id'] . "</td>";
print '<td align="center">'. $row['details'] . "</td>";
print '<td align="center">'. $row['date_posted'] . " - " . $row['time_posted'] . "</td>";
print '<td align="center">'. $row['date_edited'] . " - " . $row['time_edited'] . "</td>";
print '<td align="center"><a href="edit.php">edit</a></td>';
print '<td align="center"><a href="delete.php">delete</a></td>';
print '<td align="center">'. $row['public'] . "</td>";
print "</tr>";
}
?>
</table>
</body>
</html>
)
）
edit.php edit.php
<html>
<head>
<title>My first PHP website</title>
</head>
<?php
session_start(); //starts the session
if($_SESSION['user']){ //checks if user is logged in
}
else{
header("location:index.php"); // redirects if user is not logged in
}
$user = $_SESSION['user']; //assigns user value
$id_exists = false;
?>
<body>
<h2>Home Page</h2>
<p>Hello <?php Print "$user"?>!</p> <!--Displays user's name-->
<a href="logout.php">Click here to logout</a><br/><br/>
<a href="home.php">Return to Home page</a>
<h2 align="center">Currently Selected</h2>
<table border="1px" width="100%">
<tr>
<th>Id</th>
<th>Details</th>
<th>Post Time</th>
<th>Edit Time</th>
<th>Public Post</th>
</tr>
<?php
if(!empty($_GET['id']))
{
$id = $_GET['id'];
$_SESSION['id'] = $id;
$id_exists = true;
mysql_connect("localhost", "root","") or die(mysql_error()); //Connect to server
mysql_select_db("first_db") or die("Cannot connect to database"); //connect to database
$query = mysql_query("Select * from list Where id='$id'"); // SQL Query
$count = mysql_num_rows($query);
if($count > 0)
{
while($row = mysql_fetch_array($query))
{
Print "<tr>";
Print '<td align="center">'. $row['id'] . "</td>";
Print '<td align="center">'. $row['details'] . "</td>";
Print '<td align="center">'. $row['date_posted']. " - ". $row['time_posted']."</td>";
Print '<td align="center">'. $row['date_edited']. " - ". $row['time_edited']. "</td>";
Print '<td align="center">'. $row['public']. "</td>";
Print "</tr>";
}
}
else
{
$id_exists = false;
}
}
?>
</table>
<br/>
<?php
if($id_exists)
{
Print '
<form action="edit.php" method="POST">
Enter new detail: <input type="text" name="details"/><br/>
public post? <input type="checkbox" name="public[]" value="yes"/><br/>
<input type="submit" value="Update List"/>
</form>
';
}
else
{
Print '<h2 align="center">There is no data to be edited.</h2>';
}
?>
</body>
</html>
<?php
if($_SERVER['REQUEST_METHOD'] == "POST")
{
mysql_connect("localhost", "root","") or die(mysql_error()); //Connect to server
mysql_select_db("first_db") or die("Cannot connect to database"); //Connect to database
$details = mysql_real_escape_string($_POST['details']);
$public = "no";
$id = $_SESSION['id'];
$time = strftime("%X");//time
$date = strftime("%B %d, %Y");//date
foreach($_POST['public'] as $list)
{
if($list != null)
{
$public = "yes";
}
}
mysql_query("UPDATE list SET details='$details', public='$public', date_edited='$date', time_edited='$time' WHERE id='$id'") ;
header("location: home.php");
}
?>
and here's the one with ?id=1 in the url http;//s15,postimg,org/yoabiq0p7/screenshot_21,png (change the commas with fullstops). 这是URL http; // s15，postimg，org / yoabiq0p7 / screenshot_21，png中带有?id=1的那个（用句号更改逗号）。
2 个解决方案
解决方案1
0 2016-11-24 22:03:49
you arent passing the data in the home.php 您不能在home.php中传递数据
you are doing normal link to edit.php and you arent passing the data ?id=1 您正在做edit.php的普通链接，并且您没有通过数据？id = 1
try edit this: 尝试编辑此：
print '<td align="center"><a href="edit.php">edit</a></td>';
to this: 对此：
print '<td align="center"><a href="edit.php?id=' . $row . '">edit</a></td>';
解决方案2
0 已采纳 2016-11-24 22:04:37
You are printing only the edit.php, you need to print the entire edit link. 您仅打印edit.php，需要打印整个编辑链接。
print '<td align="center"><a href="edit.php">edit</a></td>';
Replace this line with: 将此行替换为：
print '<td align="center"><a href="edit.php?id=' . $row["id"] . '">edit</a></td>';
This will solve the problem. 这样可以解决问题。
PS: Be careful, your code is open for SQL Injection! PS：请注意，您的代码已开放用于SQL注入！ Make sure to use mysql_real_escape_string() in this place: 确保在此位置使用mysql_real_escape_string（）：
$id = mysql_real_escape_string($_GET['id']);
If the id is only number, you can do the following too to avoid SQL Injection: 如果id仅是数字，则也可以执行以下操作以避免SQL注入：
$id = intval($_GET["id"]);
The SQL Injection thing is very serious and you need to filter what comes from outside. SQL注入非常重要，您需要过滤来自外部的内容。 I recommend using prepared statement PDO too. 我建议也使用预准备语句PDO。
声明:本站的技术帖子网页，遵循CC BY-SA 4.0协议，如果您需要转载，请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.