douge3492 2016-01-05 14:30
浏览 616
已采纳

未捕获的错误:调用未定义的函数mysql_escape_string()

Fatal error: Uncaught Error: Call to undefined function mysql_escape_string() in C:\xampp\htdocs\phoenixprojectegister.php:16 Stack trace: #0 {main} thrown in C:\xampp\htdocs\phoenixprojectegister.php on line 16

How to fix this?

<?php
require("config.php");
?>
<?php
if(isset($_POST['submit'])){

$email1 = $_POST['email1'];
$email2 = $_POST['email2'];
$pass1 = $_POST['pass1'];
$pass2 = $_POST['pass2'];

if($email1 == $email2) {
    if($pass1 == $pass2) {
//All good. Nastavi broo.

$name = mysql_escape_string($_POST['name']);
$lname = mysql_escape_string($_POST['lname']);
$uname = mysql_escape_string($_POST['uname']);
$email1 = mysql_escape_string($email1);
$email2 = mysql_escape_string($email2);
$pass1 = mysql_escape_string($pass1);
$pass2 = mysql_escape_string($pass2);

mysql_query("INSERT INTO `users` (`id`, `name`, `lname`, `uname`, `email`, `pass`) VALUES (NULL, '$name', '$lname', '$uname', '$email1', '$pass1')") or die (mysql_error());



}else{
  echo "Sorry, your password is not corrext.";
  exit();
}
}else{
  echo "Sorry!";
}

} // brace for submit conditional

$form = <<<EOT
<form action="register.php" method="POST">
First Name: <input type="text" name="name" /></br>
Last Name: <input type="text" name="lname" /></br>
Username: <input type="text" name="uname" /></br>
Email: <input type="text" name="email1" /></br>
Confirm Email: <input type="text" name="email2" /></br>
Password: <input type="password" name="pass1" /></br>
Confirm Password: <input type="password" name="pass2" /></br>
<input type="submit" value="Register" name="submit" />
</form>
EOT;
echo $form;

?>

Well I know that I was try to mix mysql and mysqli....

  • 写回答

4条回答 默认 最新

  • dsour68888 2016-01-05 14:53
    关注

    To help you out here... (too long for a comment)

    Your require("config.php"); should contain the following:

    Sidenote: Use the proper settings for your host.

    $link = mysqli_connect("localhost", "username", "mpassword", "database") or die($link);
    

    Then changing your escape functions to use the mysqli_ version of it and passing the connection parameter to it:

    $name = mysqli_real_escape_string($link, $_POST['name']);
    $lname = mysqli_real_escape_string($link, $_POST['lname']);
    $uname = mysqli_real_escape_string($link, $_POST['uname']);
    $email1 = mysqli_real_escape_string($link, $email1);
    $email2 = mysqli_real_escape_string($link, $email2);
    $pass1 = mysqli_real_escape_string($link, $pass1);
    $pass2 = mysqli_real_escape_string($link, $pass2);
    

    Again, same thing for the query. Using the i version and passing connection to it as the first parameter.

    mysqli_query($link, "INSERT INTO ...
    

    Check for errors on your query using mysqli_error($link);

    So you could modify the query to read as

    $query = mysqli_query($link, "INSERT INTO ...
    

    and doing

    if(!$query){
       echo "Error: " . mysqli_error($link);
       }
    

    Also read the following on Stack in regards to API mixing:

    • Can I mix MySQL APIs in PHP?
    • You can't. mysql_ with mysqli_ or PDO etc. do NOT intermix together. You must use the same one from connecting to querying.

    Footnotes.

    Passwords

    I also noticed that you may be storing passwords in plain text. This is not recommended. If you intend on going LIVE with this at some point, do NOT store passwords as plain text in your database.

    Consult the following.

    Other links:

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论
查看更多回答(3条)

报告相同问题?

悬赏问题

  • ¥115 用Java解决探地雷达dzt文件的解析过程
  • ¥20 有关神经网络这道(b)determine the parameters of neural network
  • ¥25 annaconda jvpyter
  • ¥20 来一个会抓包app支付接口的
  • ¥30 vivado2017.4的sdk打不开
  • ¥50 matlab,文献复现
  • ¥20 寻找Flink CDC指导,有偿咨询
  • ¥15 cruise如何仿真不同温度下车辆的经济性?
  • ¥20 扑克牌游戏的完整代码
  • ¥88 求帮安装Python架构的vnpy