1 回答

TA貢獻(xiàn)1803條經(jīng)驗 獲得超6個贊
由于您一次僅提交一種格式,因此無法插入到兩個表中。您需要檢查提交的是哪個表單,并插入到相應(yīng)的表中。每個表單都需要一個具有不同名稱或值的提交按鈕,這樣您就可以知道在 PHP 中使用了哪一個。
您還應(yīng)該使用準(zhǔn)備好的語句,而不是將變量替換到 SQL 中,以防止 SQL 注入。我已經(jīng)展示了如何做到這一點。
<?php
ob_start(); //Turns on output buffering
session_start(); //This starts a session variable where it store the input so the user doesnt have to start over if they get an error
$con = mysqli_connect("localhost","root","","test-sql"); //connection variables
$timezone = date_default_timezone_set("Europe/London");
if(mysqli_connect_errno()){
echo "failed to connect:" . mysqli_connect_errno();
}
?>
<html>
<head>
<! here we add the links and the jquery>
<title>Register Project</title>
</head>
<body>
<div id="first">
<form action="test-sql.php" method="POST">
<input type="text" name="Inf_fname" placeholder="First Name" required>
<br>
<input type="text" name="Inf_lname" placeholder="Last Name" required>
<input type="submit" name="inf_submit" value="Register">
</form>
</div>
<div id="second">
<form action="test-sql.php" method="POST">
<br>
<input type="text" name="Cust_fname" placeholder="First Name" required>
<br>
<input type="text" name="Cust_lname" placeholder="Last Name" required>
<br>
<input type="submit" name="cust_submit" value="Register">
</form>
</div>
</body>
</html>
<?php
$inf_fname = "";
$cust_fname = "";
$inf_lname = "";
$cust_lname = "";
if(isset($_POST['inf_submit'])) {
$inf_fname = strip_tags($_POST['Inf_fname']);
$inf_fname = str_replace(' ', '', $inf_fname);
$_SESSION['Inf_fname'] = $inf_fname;
$inf_lname = strip_tags($_POST['Inf_lname']);
$inf_lname = str_replace(' ', '', $inf_lname);
$_SESSION['Inf_lname'] = $inf_lname;
$stmt = mysqli_prepare($con, "INSERT INTO inf VALUES (?, ?)");
mysqli_stmt_bind_param($stmt, "ss", $inf_fname, $inf_lname);
mysqli_stmt_execute($stmt);
} elseif (isset($_POST['cust_submit'])) {
$cust_fname = strip_tags($_POST['Cust_fname']);
$cust_fname = str_replace(' ', '', $cust_fname);
$_SESSION['Cust_fname'] = $cust_fname;
$cust_lname = strip_tags($_POST['Cust_lname']);
$cust_lname = str_replace(' ', '', $cust_lname);
$_SESSION['Cust_lname'] = $cust_lname;
$stmt = mysqli_prepare($con, "INSERT INTO customer VALUES (?, ?)");
mysqli_stmt_bind_param($stmt, "ss", $cust_fname, $cust_lname);
mysqli_stmt_execute($stmt);
}
?>
- 1 回答
- 0 關(guān)注
- 105 瀏覽
添加回答
舉報