從html上顯示的表中洗掉行并在mysql資料庫中記錄時禁止訪問

我在 mysql 資料庫中創建了一個表，并在 html 頁面上顯示了表的內容。現在，我試圖從顯示的表中洗掉一行。但是，我面臨以下錯誤：禁止您無權訪問此資源。

Apache/2.4.51 (Win64) OpenSSL/1.1.1l PHP/8.0.12 服務器在 172.16.5.63 埠 80

我會很感激你的幫助 我的代碼

<?php 
$servername="localhost";
$username="root";
$password="";
$dbname="entrydb";

// Create connection
$conn = new mysqli($servername, $username, $password, $dbname);
// Check connection
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

if(isset($_POST['save']))
{
  $patient_name = $_POST['name'];
  $gender = $_POST['gender'];
  $age = $_POST['age'];
  $gene_name = $_POST['gene'];
  $method = $_POST['method'];
  $number_of_fragments = $_POST['fragments'];

  $sql_query = "INSERT INTO entry_details(name, gender, age, gene, method, fragments) VALUES ('$name', '$gender', '$age', '$gene', '$method', '$fragments')";

if (!$conn->query($sql_query))
{
echo "Connection error";
}

}

// delete row
if (isset($_POST['delete_id']))
{
  $delete_id = (int) $_POST['delete_id'];
  $sql_del="DELETE FROM `entry_details` WHERE ID='$delete_id'";
  $result_del=$link->query($sql_del);

  if (!$result_del)
  {
    echo "Delete ERROR";
  }
}

?>


// Display table
  <?php
  $sqlip = "SELECT * FROM entry_details";
  $resultip = $conn->query($sqlip);

  echo '
<table class= "input_table">
    <th>ID</th>
    <th>Name</th>
    <th>Gender</th>
    <th>Age</th>
    <th>Gene</th>
    <th>Method</th>
    <th>Fragments</th>
    <th>Edit</th>
  </tr>';
  if ($resultip->num_rows > 0)
    {
      while($rowip = $resultip->fetch_assoc())
        {
         echo '<tr>
         <td>'.$rowip['ID'].' </td>
         <td>'.$rowip['name'].' </td>
         <td>'.$rowip['gender'].' </td>
         <td>'.$rowip['age'].' </td>
         <td>'.$rowip['gene'].' </td>
         <td>'.$rowip['method'].' </td>
         <td>'.$rowip['fragments'].' </td>
         <td><a href=\"?delete_id={'.$rowip['ID'].'}\">Delete row</a></td>
         </tr>';
        }
    }
    echo '</table>';  
  ?>

uj5u.com熱心網友回復：

我建議您bind_params()在 SQL 查詢中直接使用函式而不是使用變數。因為有時我也面臨這種錯誤。

搜索關于你

uj5u.com熱心網友回復：

首先，嘗試使用 mysqli real_escape_string() 轉義字串中的特殊字符以用于 SQL 查詢

<?php 
    $servername="localhost";
    $username="root";
    $password="";
    $dbname="entrydb";

    // Create connection
    $conn = new mysqli($servername, $username, $password, $dbname);
    // Check connection
    if ($conn->connect_error) {
        die("Connection failed: " . $conn->connect_error);
    }

    if(isset($_POST['save']))
    {
         $patient_name = $_POST['name'];
         $gender = $_POST['gender'];
         $age = $_POST['age'];
         $gene_name = $_POST['gene'];
         $method = $_POST['method'];
         $number_of_fragments = $_POST['fragments'];

        $sql_query = "INSERT INTO entry_details(name, gender, age, gene, method, fragments) VALUES ('$name', '$gender', '$age', '$gene', '$method', '$fragments')";

        if (!$conn->query($sql_query))
        {
            echo "Connection error";
        }

    }

    // delete row
    if (isset($_GET['delete_id']))
    {
        $delete_id = (int) $_GET['delete_id'];
        $sql_del="DELETE FROM `entry_details` WHERE ID='$delete_id'";
        $result_del=$link->query($sql_del);

        if (!$result_del)
        {
            echo "Delete ERROR";
        }
    }

?>


// Display table
<?php
    $sqlip = "SELECT * FROM entry_details";
    $resultip = $conn->query($sqlip);

    echo '
            <table class= "input_table">
          <th>ID</th>
           <th>Name</th>
          <th>Gender</th>
           <th>Age</th>
           <th>Gene</th>
           <th>Method</th>
           <th>Fragments</th>
           <th>Edit</th>
      </tr>';
    if ($resultip->num_rows > 0)
    {
        while($rowip = $resultip->fetch_assoc())
        {
         echo '<tr>
         <td>'.$rowip['ID'].' </td>
         <td>'.$rowip['name'].' </td>
         <td>'.$rowip['gender'].' </td>
         <td>'.$rowip['age'].' </td>
         <td>'.$rowip['gene'].' </td>
         <td>'.$rowip['method'].' </td>
         <td>'.$rowip['fragments'].' </td>
         <td><a href="?delete_id='.$rowip['ID'].'">Delete row</a></td>
        </tr>';
        }
    }
    echo '</table>';  
?>

標籤：php html mysql

上一篇：在PHP中創建DOMDocument

下一篇：您可以在Powershellcmdlet呼叫中動態設定屬性嗎？