Question

这个sql语句$sql="select * from user where username=".$username;错在哪里？

Answer 1

php require("../global.php");//创建数据库对象 @session_start();//用于验证码！ if($_SERVER['REQUEST_METHOD'] == 'POST'){$username=$_POST['username']; $password=$_POST['password']; $password1=$_POST['password1']; if( $username==""|| $password==""|| $password1==""||$_POST['authinput']==""){warn("请完整填写好注册信息...");}else //如果所有信息都填写{$sql="select * from user where username=".$username; $result=$DB->query($sql); if($result['username']!=0) else if( $password!= $password1){warn("两次密码不相同，请重新输入！");}else if (strcasecmp($_SESSION['code_str'],$_POST['authinput'])==0) { //这里写获取的内容和sql语句; $sql="insert into user(username,password,register_time)"; $sql.="values('".$username."','".$password."',now())"; $DB->query($sql); warn("恭喜，您已成功注册！