doucanrui1735 2016-08-15 16:45
浏览 13

来自课堂内的mysqli。 它有效,但我做得对吗?

I have used an external php class provide MySQL related functions for some time. All good. Just recently I have changed to mysqli, and the adjustments I have made seem to work, but nobody else (as far as I can see) does it the same way, making me wonder whether I am doing it wrong! Can anyone confirm. Thanks. By the way, I am attempting to avoid MySQL injection, hence the use of prepared queries - Am I achieving what I want?

Here is my database initialization function, which is a method in the class 'page'

function initialize()
    // Get the database connection info from the settings file
    {
        $info = new settings();
        $memberserver   = $info->sqlserver;
        $memberuser     = $info->sqluser;
        $memberpass     = $info->sqlpass;
        $memberdatabase = $info->sqldatabase;

        // connect to database
        $this->link = new mysqli("localhost", $memberuser, $memberpass, $memberdatabase);
        mysqli_set_charset($this->link, "utf8");
        return($this->link);
     }

Then the php page calls the method, and performs a mysqli query as follows

$q = $page -> initialize();
$query ="INSERT INTO tablename (title, description, slug, date) VALUES (?, ?, ?, ?)";
$stmt = $q ->prepare($query);
$stmt->bind_param('ssss', $title, $desc, $slug, $date);
$stmt->execute();
$stmt->close();
$page -> disconnect();

As I say, it works. But have I made a schoolboy error? As always, thanks for any/all replies!

  • 写回答

0条回答 默认 最新

    报告相同问题?

    悬赏问题

    • ¥15 Mac系统vs code使用phpstudy如何配置debug来调试php
    • ¥15 目前主流的音乐软件,像网易云音乐,QQ音乐他们的前端和后台部分是用的什么技术实现的?求解!
    • ¥60 pb数据库修改与连接
    • ¥15 spss统计中二分类变量和有序变量的相关性分析可以用kendall相关分析吗?
    • ¥15 拟通过pc下指令到安卓系统,如果追求响应速度,尽可能无延迟,是不是用安卓模拟器会优于实体的安卓手机?如果是,可以快多少毫秒?
    • ¥20 神经网络Sequential name=sequential, built=False
    • ¥16 Qphython 用xlrd读取excel报错
    • ¥15 单片机学习顺序问题!!
    • ¥15 ikuai客户端多拨vpn,重启总是有个别重拨不上
    • ¥20 关于#anlogic#sdram#的问题,如何解决?(关键词-performance)