<select class="form-control" name="city"> <option value="0">Filter by City</option> <?php try { $pdo = new PDO(DBCONNSTRING,DBUSER,DBPASS); $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); $sql = "select geocities.AsciiName from geocities INNER JOIN travelimagedetails ON geocities.GeoNameID = travelimagedetails.CityCode group by geocities.GeoNameID"; $result = $pdo->query($sql); while ($row = $result->fetch()) { echo '<option value="'.$row['AsciiName'].'>'; echo $row['AsciiName'].'</option>'; } $pdo = null; } catch (PDOException $e) { die( $e->getMessage() ); } ?> </select> </div>輸出當(dāng)我刪除第一個(gè) PHP 標(biāo)簽時(shí)一切正常但是當(dāng)我添加它時(shí)一切都失敗了
1 回答
江戶川亂折騰
TA貢獻(xiàn)1851條經(jīng)驗(yàn) 獲得超5個(gè)贊
你應(yīng)該嘗試頻繁使用PHP標(biāo)簽，它會(huì)解決你難以清晰閱讀代碼的問題
<select class="form-control" name="city">
<option value="0">Filter by City</option>
<?php
try {
$pdo = new PDO(DBCONNSTRING,DBUSER,DBPASS);
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$sql = "select geocities.AsciiName from geocities INNER JOIN travelimagedetails ON geocities.GeoNameID = travelimagedetails.CityCode group by geocities.GeoNameID";
$result = $pdo->query($sql);
while ($row = $result->fetch()) {
?>
<option value="<?php echo $row['AsciiName']?>"> <?php echo $row['AsciiName']?> </option>;
<?php
}
$pdo = null;
}
catch (PDOException $e) {
die( $e->getMessage() );
}
?>
</select>
您應(yīng)該使用準(zhǔn)備好的語句來防止 SQL 注入
準(zhǔn)備好的聲明
<select class="form-control" name="city">
<option value="0">Filter by City</option>
<?php
try {
$pdo = new PDO(DBCONNSTRING,DBUSER,DBPASS);
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$sql = "select geocities.AsciiName from geocities INNER JOIN travelimagedetails ON geocities.GeoNameID = travelimagedetails.CityCode group by geocities.GeoNameID";
// check if prepare statement worked well
if (!$query = $pdo->prepare($sql)) {
// error message
} else{ // successful prepared statement
//checking if query executed well
if ($query->execute()) {
$result = $query->fetchAll();
}
}
// checking if $result is alive
if (isset($result)) {
foreach ($result as $row) { ?>
<option value="<?php echo $row['AsciiName']?>"> <?php echo $row['AsciiName']?> </option>;
<?php //$pdo = null;
} // end foreach
} // end check result if
} // end Try
catch (PDOException $e) {
die( $e->getMessage() );
}
?>
</select>
- 1 回答
- 0 關(guān)注
- 167 瀏覽
添加回答
舉報(bào)
0/150
提交
取消