如何使用面向对象的PHP将数据插入数据库[关闭]

Question

My INSERT statement is not working. The number of rows affected is affected is 0. Here is my code :

<?php

require_once('class.config.php');

class userActions{

    public $link;      

    function __construct(){
        $db_connection = new dbConnection();
        $this->link = $db_connection->connect();   
        return $this->link;
    }

    function registerUsers($username, $password, $ip_address){
        $query = $this->link->prepare("INSERT INTO users (user_name,password,ip_address) VALUES (?,?,?)");
        $values = array($username, $password, $ip_address);
        $query->execute($values);
        $counts = $query->rowCount();
        return $counts;
    }
}

$users = new userActions();
echo $users->registerUsers('bob', 'dave123','127.0.0.1');

?>

What have I done wrong?

EDIT : this is my class.config.php:

class dbConnection{
protected $db_conn;
public $db_host = "localhost:8080";
public $db_user = "root";
public $db_pass = "";
public $db_name = "facebook";

function connect(){
    try{
    $this->db_conn = new PDO("mysql:host = $this->db_host; dbname = $this->db_name",
    $this->db_user, $this->db_pass);
    $this->db_conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
    return $this->db_conn;    
    }

    catch(PDOException $e){
        return "MySQL error : " . $e->getMessage();
    }
}

}

Answer 1

Change your registerUsers function code to below

If you are using mysqli then use below

function registerUsers($username, $password, $ip_address){
       $query = $this->link->prepare("INSERT INTO users (user_name,password,ip_address) VALUES (?,?,?)");
       $query->bind_param("sss", $username, $password, $ip_address);
       $query->execute();

}

EDIT

As I see you are using PDO. Try to use like anyone of below

function registerUsers($username, $password, $ip_address){
       $query = $this->link->prepare("INSERT INTO users (user_name,password,ip_address) VALUES (:username,:password,:ip_address)");
       $query->bindParam(':username', $username);
       $query->bindParam(':password', $password);
       $query->bindParam(':ip_address', $ip_address);
       $query->execute();
}

OR

function registerUsers($username, $password, $ip_address){
  $query = $this->link->prepare("INSERT INTO users (user_name,password,ip_address) VALUES (:username,:password,:ip_address)");
  $query->execute(array('username' => $username, 'password' => $password, 'ip_address' => $ip_address));
    }

I would prefer to use bindParam as it is secure and it replaces my_real_escape_string.