dongxianrang9269 2016-03-27 19:17
浏览 191
已采纳

获取Alert的值并在php中将其设置为变量

I want to make my alert value as a variable in php. This is my code

<html>    
<body>


    <form action="" method="post">

    <select name="kat" id="kat" >
        <option></option>
        <option>UNANG TAE</option>
        <option>PANGALAWANG TAE</option>

    </select>

        <input type="text" value="" name="baliw">

    </form>


<script src="js/jquery.js"></script>

<script>

$('#kat').on('change', function () {

<?php

/*
mysql_connect('localhost','root','');
mysql_select_db('perens');
mysql_query(" INSERT INTO table (sample) VALUES ('".$alert_value."') ");
*/
    ?>

alert(this.value);


});


</script>

    </body>
</html>

There's a comment inside my PHP where I want to make the alert value as a variable but I don't know how.

  • 写回答

3条回答 默认 最新

  • duan198299 2016-03-27 19:52
    关注

    You can't do that directly.

    The javascript event listener that raises the alert message is executed by the web browser (client side) and the php is executed in the server side before than page is loaded by the web browser (server side).

    What you can do is to send the alert message to a PHP script using an AJAX request.

    Example:

    $('#kat').on('change', function() {
    
      $.ajax({
        url: "myscript.php",
        type: "post",
        data: {
          message: this.value
        }
      });
    
      alert(this.value);
    
    });
    <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js"></script>
    
    Type whatever you want here:
    <input type="text" id="kat" />

    Now you can capture the messages from a php script like the following one:

    <?php
    
    // myscript.php
    
    $alert_message = $_POST['message'];
    
    // !!! Importat, sanitize the input in order to avoid a classic
    // SQLInjection
    // $alert_message =  mySanitizationFunction($_POST['message']);
    
    mysql_connect('localhost','root','');
    mysql_select_db('perens');
    mysql_query(" INSERT INTO table (sample) VALUES ('".$alert_value."') ");
    
    ?>
    

    Remember that it is important to sanitize the input in order to avoid a SQL Injection, I recommend you to use a database abstration layer like PDO or an ORM that can facilitate the input sanitization.

    </div>
    
    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论
查看更多回答(2条)

报告相同问题?

悬赏问题

  • ¥50 导入文件到网吧的电脑并且在重启之后不会被恢复
  • ¥15 (希望可以解决问题)ma和mb文件无法正常打开,打开后是空白,但是有正常内存占用,但可以在打开Maya应用程序后打开场景ma和mb格式。
  • ¥20 ML307A在使用AT命令连接EMQX平台的MQTT时被拒绝
  • ¥20 腾讯企业邮箱邮件可以恢复么
  • ¥15 有人知道怎么将自己的迁移策略布到edgecloudsim上使用吗?
  • ¥15 错误 LNK2001 无法解析的外部符号
  • ¥50 安装pyaudiokits失败
  • ¥15 计组这些题应该咋做呀
  • ¥60 更换迈创SOL6M4AE卡的时候,驱动要重新装才能使用,怎么解决?
  • ¥15 让node服务器有自动加载文件的功能