会话变量在 echo 中工作但在 SQL 查询中不工作

Question

我想将login.php 变量$user_key 和$user_id 的值传递给我使用过会话的另一个文件statusdata.php。在statusdata.php 中，我想在statusdata.php 文件的sql 查询中使用那些会话变量值。

为了在login.php 中实现这一点，我将变量$user_key 和$user_id 的值分别传递给会话变量$_SESSION["key"] 和$_SESSION["id"]，然后在statusdata.php 中调用会话变量并将它们的值传递给变量@ 987654333@ & $user_id statusdata.php

现在的问题是，当在 SQL 查询中使用变量 $user_key 和 $user_id 时，它没有返回正确的输出，但在 echo 中使用相同的变量它给出了正确的值意味着当我回显变量时会话工作正常但是不能在 SQL 中工作。我也尝试过直接传递会话变量，但同样的事情发生在 echo 中，但在 SQL 中没有。

login.php

<?php
// Start the session
session_start();

require "conn.php";

$user_key = '8C9333343C6C4222418EDB1D7C9F84D051610526085960A1732C7C3D763FFF64EC7F5220998434C896DDA243AE777D0FB213F36B9B19F7E4A244D5C993B8DFED';
$user_id = '1997';

$mysql_qry = "select * from applications where application_key = '".$user_key."' and application_id like '".$user_id."';";

$result = mysqli_query($conn, $mysql_qry);
if (mysqli_num_rows($result) > 0){
    $_SESSION["key"] = ".$user_key.";
    $_SESSION["id"] = ".$user_id.";
    echo "Login Success";
}

else {
    echo "Login Not Success";   
}
?>

statusdata.php

<?php

// Start the session
session_start();

require "conn.php";

$user_key = "-1";
if (isset($_SESSION["key"])) {
  $user_key = $_SESSION["key"];
}

$user_id = "-1";
if (isset($_SESSION["id"])) {
  $user_id = $_SESSION["id"];
}


 //creating a query
 $stmt = $conn->prepare("SELECT applications.application_id, applications.applicant_name, applications.applicant_aadhaar, applications.applicant_phone, applications.subject, applications.date, applications.description, applications.chairperson_remark, applications.status, officer_accounts.name_of_officer, applications.officer_remark, applications.last_update_on 
FROM applications INNER JOIN officer_accounts ON applications.account_id = officer_accounts.account_id 
WHERE applications.application_id = '".$user_id."' AND applications.application_key = '".$user_key."';");

 //executing the query 
 $stmt->execute();

 //binding results to the query 
 $stmt->bind_result($id, $name, $aadhaar, $phone, $subject, $date, $description, $chairperson, $status, $officername, $officerremark, $lastupdate);

 $applications = array(); 

 //traversing through all the result 
 while($stmt->fetch()){
 $temp = array();
 $temp['applications.application_id'] = $id; 
 $temp['applications.applicant_name'] = $name; 
 $temp['applications.applicant_aadhaar'] = $aadhaar; 
 $temp['applications.applicant_phone'] = $phone; 
 $temp['applications.subject'] = $subject;
 $temp['applications.date'] = $date;
 $temp['applications.description'] = $description;
 $temp['applications.chairperson_remark'] = $chairperson;
 $temp['applications.status'] = $status;
 $temp['officer_accounts.name_of_officer'] = $officername;
 $temp['applications.officer_remark'] = $officerremark;
 $temp['applications.last_update_on'] = $lastupdate;
 array_push($applications, $temp);
 }

 //displaying the result in json format 
 echo json_encode($applications);

 // Echo session variables that were set on previous page
 echo "<br>key is " . $user_key . ".<br>";
 echo "id is " . $user_id . ".";

?>

输出login.php

Login Success

输出statusdata.php

[]
key is .8C9333343C6C4222418EDB1D7C9F84D051610526085960A1732C7C3D763FFF64EC7F5220998434C896DDA243AE777D0FB213F36B9B19F7E4A244D5C993B8DFED..
id is .1997..

我想要来自statusdata.php 的输出（如果我在变量$user_key 和$user_id 中使用直接值而不是来自login.php 的会话变量，我会得到它）

[{"applications.application_id":1997,"applications.applicant_name":"Tanishq","applications.applicant_aadhaar":"987654321","applications.applicant_phone":"123456789","applications.subject":"asdnjsnadnksncdnsjnvsavasdnjsnadnksncdnsjnvsav","applications.date":"2018-07-02 09:11:47","applications.description":"asdnjsnadnksncdnsjnvsavasdnjsnadnksncdnsjnvsavasdnjsnadnksncdnsjnvsavasdnjsnadnksncdnsjnvsavasdnjsnadnksncdnsjnvsav","applications.chairperson_remark":"asdnjsnadnksncdnsjnvsavasdnjsnadnksncdnsjnvsav","applications.status":1,"officer_accounts.name_of_officer":"Chayan Bansal","applications.officer_remark":"asdnjsnadnksncdnsjnvsavasdnjsnadnksncdnsjnvsav","applications.last_update_on":"2018-07-22 09:14:25"}]
key is 8C9333343C6C4222418EDB1D7C9F84D051610526085960A1732C7C3D763FFF64EC7F5220998434C896DDA243AE777D0FB213F36B9B19F7E4A244D5C993B8DFED.
id is 1997.

注意：我以 JSON 格式获取statusdata.php SQL 查询的输出，因为最后我在 android 中提取它。

请帮助我，我已经尝试了其他类似问题所暗示的一切，但没有任何帮助

Answer 1

看起来更像是拼写错误。你有这个在login.php:

$_SESSION["key"] = ".$user_key.";
$_SESSION["id"] = ".$user_id.";

这会污染您的原始价值观...通过在它们周围添加不​​必要的点。通过简单地分配来清理它：

$_SESSION["key"] = $user_key;
$_SESSION["id"] = $user_id;

它应该开始更好地工作了。

---

旁注，您使用的是prepare，但没有使用bind_param。将您的 SQL prepare 更改为以下内容（注意 ? 占位符），并添加 bind_param：

$stmt = $conn->prepare("SELECT applications.application_id, applications.applicant_name, applications.applicant_aadhaar, applications.applicant_phone, applications.subject, applications.date, applications.description, applications.chairperson_remark, applications.status, officer_accounts.name_of_officer, applications.officer_remark, applications.last_update_on 
         FROM applications INNER JOIN officer_accounts ON applications.account_id = officer_accounts.account_id 
         WHERE applications.application_id = ? AND applications.application_key = ?;");
$stmt->bind_param('ss',$user_id,$user_key);