我正在慢慢地將有 MSQLI 的網(wǎng)站頁(yè)面轉(zhuǎn)換為 PDO。但是我有登錄腳本的這一部分，我不確定它是否可以在 PDO 中完成，如果不能，是否有人對(duì)如何使其安全有任何建議。它與下面的代碼部分有關(guān)，它是一個(gè)與 $pass_fail 變量相關(guān)的多查詢，然后是一個(gè)我可能可以解決的單個(gè)選擇查詢 $pass_fail_query 變量。但它是我在使用 PDO 時(shí)遇到的多查詢，我該如何執(zhí)行它？$pass_fail = " DELETE FROM `login_fail` WHERE `last_fail_login` < DATE_SUB(NOW(), INTERVAL 5 MINUTE);";$pass_fail .= " INSERT INTO login_fail ( user_id, email, last_fail_login, fail_login_ip ) VALUES ( '$user_id', '$email', '$last_login_date', '$ip' );";$pass_fail .= " UPDATE members SET `last_fail_login` = '$last_login', `fail_login_ip`= '$ip' WHERE email = '$email'";$pass_fail_query = " SELECT * FROM `login_fail` WHERE `email` = '$email' AND `last_fail_login` > date_sub(now(), interval 5 minute)";
1 回答
慕森卡
TA貢獻(xiàn)1806條經(jīng)驗(yàn) 獲得超8個(gè)贊
只需將它們創(chuàng)建為單獨(dú)的查詢。
$pass_fail_delete = $pdo->prepare("
DELETE FROM `login_fail`
WHERE
`last_fail_login` < DATE_SUB(NOW(), INTERVAL 5 MINUTE);
");
$pass_fail_insert = $pdo->prepare("
INSERT INTO login_fail (
user_id,
email,
last_fail_login,
fail_login_ip
) VALUES (
:user_id,
:email,
:last_login_date,
:ip
);
");
$pass_fail_update = $pdo->prepare("
UPDATE members SET
`last_fail_login` = :last_login,
`fail_login_ip`= :ip
WHERE
email = :email
");
$pass_fail_query = $pdo->prepare("
SELECT
*
FROM `login_fail`
WHERE
`email` = :email
AND `last_fail_login` > date_sub(now(), interval 5 minute)
");
然后，而不是使用mysqli_multi_query()執(zhí)行$pass_fail在一個(gè)調(diào)用，執(zhí)行3個(gè)查詢：
$pass_fail_delete->execute();
$pass_fail_insert->execute([':user_id' => $user_id, ':email' => $email, ':last_login_date' => $last_login_date, ':ip' => $ip]);
$pass_fail_update->execute([':last_login' => $last_login, ':ip' => $ip, ':email' => $email]);
$pass_fail_query->execute([':email' => $email]);
- 1 回答
- 0 關(guān)注
- 151 瀏覽
添加回答
舉報(bào)
0/150
提交
取消