PHP和Mysql中的新闻系统

Question

我一直在尝试使该系统工作几个小时，但仍然无法使其正常工作。 这是直接来自教程的复制/粘贴，而且显然对许多其他人都有用，所以我不明白为什么它对我不起作用！ 该表已经创建，所以这根本不是问题...系统将不会在mysql数据库中输入任何内容，我也不会收到任何错误！

可以在以下位置找到该教程： http : //www.codingforums.com/archive/index.php/t-46916.html

我知道这不是一个安全的系统，但是只要我能使它正常工作，我就会对其进行整理！

这是代码：

config.php

<?php

$dbhost="localhost";
$dbusername="myusernam";
$dbpassword="mypass";
$dbname="dataname";

$connect = mysql_connect($dbhost, $dbusername, $dbpassword);
mysql_select_db($dbname,$connect) or die ("Could not select database");

?>

add_news.php

<?php

include("config.php");

if($submit)
{//begin of if($submit).

// Set global variables to easier names
$title = $_POST['title'];
$text1 = $_POST['text1'];
$text2 = $_POST['text2'];


//check if (title) field is empty then print error message.
if(!$title){ //this means If the title is really empty.
echo "Error: News title is a required field. Please fill it.";
exit(); //exit the script and don't do anything else.
}// end of if
//run the query which adds the data gathered from the form into the database
$result = mysql_query("INSERT INTO news (title, dtime, text1, text2)
VALUES ('$title',NOW(),'$text1','$text2')",$connect);
//print success message.
echo "<b>Thank you! News added Successfully!<br>You'll be redirected to Home Page after (4) Seconds";
echo "<meta http-equiv=Refresh content=4;url=index.php>";
}//end of if($submit).


// If the form has not been submitted, display it!
else
{//begin of else

?>
<br>
<h3>::Add News</h3>

<form method="post" action="<?php echo $PHP_SELF ?>">
Title: <input name="title" size="40" maxlength="255">
<br>
Text1: <textarea name="text1" rows="7" cols="30"></textarea>
<br>
Text2: <textarea name="text2" rows="7" cols="30"></textarea>
<br>
<input type="submit" name="submit" value="Add News">
</form>
<?
}//end of else

?>

news_view.php

<?php

// load the configuration file.

include("config.php");
//load all news from the database and then OREDER them by newsid
//you will notice that newlly added news will appeare first.
//also you can OREDER by (dtime) instaed of (news id)
$result = mysql_query("SELECT * FROM news ORDER BY newsid DESC",$connect);

//lets make a loop and get all news from the database
while($myrow = mysql_fetch_assoc($result))
{//begin of loop

//now print the results:
echo "<b>Title: ";
echo $myrow['title'];
echo "</b><br>On: <i>";
echo $myrow['dtime'];
echo "</i><hr align=left width=160>";
echo $myrow['text1'];

// Now print the options to (Read,Edit & Delete the news)
echo "<br><a href=\"read_more.php?newsid=$myrow[newsid]\">Read More...</a>
|| <a href=\"edit_news.php?newsid=$myrow[newsid]\">Edit</a>
|| <a href=\"delete_news.php?newsid=$myrow[newsid]\">Delete</a><br><hr>";

}//end of loop

?>

Answer 1

这应该更多是注释，但是由于那里的格式化选项非常有限，并且我有很多注释，因此请看：

谁写的那个例子……都不是最好的工作。

根本没有错误处理（ mysql_query("INSERT... ）。

请更换/扩展：

$result = mysql_query("INSERT INTO news (title, dtime, text1, text2)
VALUES ('$title',NOW(),'$text1','$text2')",$connect);
//print success message.
echo "<b>Thank you! News added Successfully!<br>You'll be redirected to Home Page after (4) Seconds";
echo "<meta http-equiv=Refresh content=4;url=index.php>";

与

$result = mysql_query("INSERT INTO news (title, dtime, text1, text2)
VALUES ('$title',NOW(),'$text1','$text2')",$connect);
if ( $result ){
//print success message.
echo "<b>Thank you! News added Successfully!<br>You'll be redirected to Home Page after (4) Seconds";
echo "<meta http-equiv=Refresh content=4;url=index.php>";
} else {
echo("Error: ".mysql_error() );
}
}//end of if($submit).

我相信插件没有运行（出于任何原因，您现在都希望可以看到）

Answer 2

试试这个代码：

config.php

<?php


$username = "myusernam";
$password = "mypass";

try {
    $connect = new PDO('mysql:host=localhost;dbname=dataname', $username, $password);
    $connect->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
} catch(PDOException $e) {
    echo 'ERROR: ' . $e->getMessage();
}

?>

addnews.php

<?php

include("config.php");

if(isset($_POST['submit'])){

$title = $_POST['title'];
$text1 = $_POST['text1'];
$text2 = $_POST['text2'];


if(empty($title)){ 
echo "Error: News title is a required field. Please fill it.";
exit(); 
}

$sql = "INSERT INTO news (title, dtime, text1, text2) VALUES (:title, NOW(), :text1, :text2)";
         $stmt = $connect->prepare($sql);
         $stmt->bindParam(':title', $title, PDO::PARAM_STR);
         $stmt->bindParam(':text1', $text1, PDO::PARAM_STR);
         $stmt->bindParam(':text2', $text2, PDO::PARAM_STR);
         $stmt->execute();


echo "<b>Thank you! News added Successfully!<br>You'll be redirected to Home Page after (4) Seconds";
echo "<meta http-equiv=Refresh content=4;url=index.php>";


}
?>

<br>
<h3>::Add News</h3>

<form method="post" action="<?php echo $PHP_SELF ?>">
Title: <input name="title" size="40" maxlength="255">
<br>
Text1: <textarea name="text1" rows="7" cols="30"></textarea>
<br>
Text2: <textarea name="text2" rows="7" cols="30"></textarea>
<br>
<input type="submit" name="submit" value="Add News">
</form>

news_view.php

<?php



include("config.php");


$stmt = $connect->prepare('SELECT * FROM news ORDER BY newsid desc');
$stmt->execute();


while($sa = $stmt->fetch(PDO::FETCH_ASSOC)) {



echo "<b>Title: ";
echo $sa['title'];
echo "</b><br>On: <i>";
echo $sa['dtime'];
echo "</i><hr align=left width=160>";
echo $sa['text1'];


echo "<br><a href=\"read_more.php?newsid=$sa[newsid]\">Read More...</a>
|| <a href=\"edit_news.php?newsid=$sa[newsid]\">Edit</a>
|| <a href=\"delete_news.php?newsid=$sa[newsid]\">Delete</a><br><hr>";

}

?>