使用MySQL和PHP更新數據庫

Question

單擊“注冊”按鈕注冊新用戶時，沒有顯示任何錯誤，但數據未插入數據庫中。

<?php
    session_start();
     if(isset($_POST['name'])&&isset($_POST['password'])){
    $name=$_POST['name'];
    $password=$_POST['password'];

    $link=mysqli_connect("localhost","root","");
    $select=mysqli_select_db($link,'first_db');
    $name=mysqli_real_escape_string($link,$name);
    $password=mysqli_real_escape_string($link,$password);
    $query="SELECT * FROM users WHERE name='$name'";
    $run=mysqli_query($link,$query);    
    $count = mysqli_num_rows($run);

    if ($count>0) {
    echo 'Sorry! This Username already exists!';
    } else {
        $name = $_POST['name'];
        $password=$_POST['password'];
        $sql = "INSERT INTO users (name, password)
                VALUES
                ('$_POST[name]','$_POST[password]')";
    }
     }
    else{
        echo"Cannot be blank";
    }
?>

Answer 1

檢查您剛剛創建的其他部分查詢，需要執行它

if ($count>0)
{
   echo 'Sorry! This Username already exists!';
} 
else
{
    $name = $_POST['name'];
    $password=$_POST['password'];
    $sql = "INSERT INTO users (name, password)VALUES('$name','$password')";
    $run=mysqli_query($link,$sql);// add this statement then your record inserted



}

Answer 2

您忘記執行插入查詢，如下所示：

mysqli_query($link,$sql); 

但是您必須使用Prepared Insert Query使其更安全：

// prepare and bind User Query
$queryUsers = $conn->prepare("INSERT INTO 
users(name,password) VALUES (?, ?)");
$queryUsers->bind_param("ss",$name,$password);

$name = $_POST[name];
$password = $_POST[password];

// execute Users Query
$queryUsers->execute();

// Close Connections
$queryUsers->close();

Answer 3

只需執行查詢字符串，就像檢查用戶是否已經存在一樣。

$sql = "INSERT INTO users (name, password)
            VALUES
            ('$_POST[name]','$_POST[password]')";
$run=mysqli_query($link,$sql);    // Executing the query here.