插入数据库问题pdo

Question

我不确定这是否是我真的累了或什么原因。 我似乎无法弄清楚为什么无法使用此代码插入数据库。

<?php
require 'mysqlcon.php';
?>

<?php


if(isset($_POST["submit"])){
try {
$dbh = new PDO("mysql:host=$hostname;dbname=CSY2028",$username,$password);

$dbh->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); // <== add this line
$sql = "INSERT INTO bookings (name, email)
VALUES ('".$_POST["name"]."','".$_POST["email"]."')";
if ($dbh->query($sql)) {
header("location: index.php");
echo "<script type= 'text/javascript'>alert('New Record Inserted Successfully');</script>";

}
else{
echo "<script type= 'text/javascript'>alert('Data not successfully Inserted.');</script>";
}

$dbh = null;
}
catch(PDOException $e)
{
echo $e->getMessage();
}

}
?>

我已经检查了ID，名称均相同且匹配的下表。 只是没有插入任何东西？

<?php
require 'mysqlcon.php';
?>

        <!-- Main -->
            <section id="main" class="wrapper">
                <div class="container">
    <section>
                            <h3>Book Novelty Vehicle</h3>
                            <form action="bookingsql.php" method="post">
                                <div class="row uniform 50%">
                                    <div class="6u 12u$(xsmall)">
                                        <input type="text" name="name" id="name" value="name" placeholder="Name" />
                                    </div>
                                    <div class="6u$ 12u$(xsmall)">
                                        <input type="email" name="email" id="email" value="email" placeholder="Email" />
                                    </div>
                                    <div class="6u 12u$(xsmall)">
                                        <input type="text" name="address" id="address" value="" placeholder="Address" />
                                    </div>
                                    <div class="6u$ 12u$(xsmall)">
                                        <input type="text" name="pup" id="pup" value="" placeholder="Pick up point" />
                                    </div>                                  
                                    <div class="6u 12u$(xsmall)">
                                        <input type="text" name="phone" id="phone" value="" placeholder="Phone Number" />
                                    </div>

                                    <div class="6u$ 12u$(xsmall)">
                                    <input type="text" name="event" id="event" value="" placeholder="Event Type" />
                                    </div>

                                    <div class="12u$">
                                        <div class="select-wrapper">
                                            <select name="category" id="category">
                                                <option value="">- Novelty Vehicle Option -</option>
                                                <option value="1">One</option>
                                                <option value="1">Two</option>
                                                <option value="1">Three</option>
                                                <option value="1">Four</option>
                                            </select>
                                        </div>
                                    </div>
                                    <div class="6u$ 12u$(small)">
                                        <input type="checkbox" id="human" name="human">
                                        <label for="human">You are aware this is for booking novelty vehicles only?</label>
                                    </div>
                                    <div class="12u$">
                                        <textarea name="info" id="info" placeholder="Please give us any additional information, this will help us speed up your booking process." rows="6"></textarea>
                                    </div>
                                    <div class="12u$">
                                        <ul class="actions">
                                            <li><input type="submit" value="Book Vehicle" class="special" /></li>
                                            <li><input type="reset" value="Reset" /></li>
                                        </ul>
                                    </div>
                                </div>
                            </form>
                        </section>

                </div>
            </section>

Answer 1

未命名提交

<input type="submit" value="Book Vehicle" class="special" />

并且if(isset($_POST["submit"])){...}都不会触发。

这样：

<input name="submit" type="submit" value="Book Vehicle" class="special" />

另外，由于您使用的是PDO，因此请使用准备好的语句。 您可以进行SQL注入。

参考文献：

• 如何防止PHP中进行SQL注入？
• http://php.net/pdo.prepared-statements