1 回答
TA貢獻(xiàn)1906條經(jīng)驗(yàn) 獲得超3個(gè)贊
您沒有將第一個(gè)查詢的結(jié)果提取到可用變量中,因此您沒有$id第一個(gè)查詢返回的每個(gè)用戶的集合
注意:您的腳本對SQL 注入攻擊是開放的。即使您正在逃避輸入,它也不安全! 您應(yīng)該考慮在或API 中使用準(zhǔn)備好的參數(shù)化語句,而不是連接值MYSQLI_PDO
因此,我還在回答中使用了準(zhǔn)備好的參數(shù)化語句。
<?php
require("./includes/databaseHandler.php");
// I assume this was a fudge to get it working
//$id = $usersData['id'];
$sql = "SELECT * FROM users";
$result = mysqli_query($con, $sql);
if(mysqli_num_rows($result) > 0 ){
// prepare query here ONCE and use it may times with amended parameters
$sqlImg = "SELECT * FROM profileimg WHERE userid = ?";
$stmt = $con->prepare($sqlImg);
while($user = $result->fetch_assoc()){
// ^^^^^
$stmt->bind_param('i', $user['id']);
$stmt->execute();
$result = $stmt->get_result();
while($rowImg = $result->fetch_assoc()){
echo "<div class='user-container'>";
if($rowImg['status'] == 0){
echo "<img src = 'uploads/profile" .$user['id']. ".jpg' >";
}else{
echo "<img src = 'uploads/profiledefault.jpg'>";
}
echo "</div>";
}
}
}
?>
- 1 回答
- 0 關(guān)注
- 129 瀏覽
添加回答
舉報(bào)
