将 mysqli 转换为 PDO 的问题 | php mySQL

Question

我目前正在将 mySQLi PHP 代码转换为 PDO 以获得更好的安全性，但我在理解如何转换下面的代码并将其实现到我的新 PDO PHP 中时遇到了一些麻烦

下面的代码应该采用最后插入的 ID（PDO 插入的那个）并将列 idnum 设置为等于 NUM（以及最后插入的 id）。

如何将其转换并添加到 PDO 中？

if (mysqli_query($conn, $sql)) {
    $last_id = mysqli_insert_id($conn);
    $sql = "UPDATE Equipment SET idnum = CONCAT('NUM', '$last_id') WHERE equipment_id = '$last_id'";
    mysqli_query($conn, $sql);
    echo "New record created successfully. Last inserted ID is: " . last_id;
} else {
    echo "Error: " . $sql . "<br>" . mysqli_error($conn);
}
mysqli_close($conn);

我想将代码添加到以下 PDO PHP 脚本中：

$hostdb = 'localhost';
$namedb = 'dbname';
$userdb = 'userdb';
$passdb = 'passdb';
$charset = 'utf8'; 

if (isset($_POST['name'], $_POST['place'], $_POST['person'] , $_POST['number'] , $_POST['other_name'])) {
    // Connect and create the PDO object
    $options = [
        PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
        PDO::ATTR_EMULATE_PREPARES => false,
    ];
    $conn = new PDO("mysql:host=$hostdb;dbname=$namedb;charset=$charset", $userdb, $passdb, $options);


    $stmt = $conn->prepare( ' INSERT INTO `Table1` (name, place, person, number, other_name, progress)
VALUES (:name,:place,:person,:number,:other_name, "Done") ' );


    $stmt->execute([
        'name' => $_POST['name'],
        'place' => $_POST['place'],
        'person' => $_POST['person'],
        'number' => $_POST['number'],
        'other_name' => $_POST['other_name'],
    ]);

    // Shows the number of affected rows
    echo 'Affected rows : '. $stmt->rowCount();

}

Answer 1

我猜是这样的（如果你想把它们结合起来）：

$hostdb = 'localhost';
$namedb = 'dbname';
$userdb = 'userdb';
$passdb = 'passdb';
$charset = 'utf8'; 

if (isset($_POST['name'], $_POST['place'], $_POST['person'] , $_POST['number'] , $_POST['other_name']  )) {
    // Connect and create the PDO object
    $options = [
        PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
        PDO::ATTR_EMULATE_PREPARES => false,
    ];
    $conn = new PDO("mysql:host=$hostdb;dbname=$namedb;charset=$charset", $userdb, $passdb, $options);

    try{
        //start a transaction {ACID}
        $conn->beginTransaction();

        $stmt = $conn->prepare('INSERT INTO `Table1` (`name`, `place`, `person`, `number`, `other_name`, `progress`)
    VALUES (:name,:place,:person,:number,:other_name, "Done") ' );

        $stmt->execute([
            'name' => $_POST['name'],
            'place' => $_POST['place'],
            'person' => $_POST['person'],
            'number' => $_POST['number'],
            'other_name' => $_POST['other_name'],
        ]);

        //get the last insert ID
        $last_id = $conn->lastInsertId();

        $stmt = $conn->prepare('UPDATE `Equipment` SET `idnum` = CONCAT("NUM", :last_id_0) WHERE `equipment_id` = :last_id_1');
        //named placeholders must be unique
        $stmt->execute([
            'last_id_0' => $last_id,
            'last_id_1' => $last_id
        ]);
        echo "New record created successfully. Last inserted ID is: " . $last_id;

        //commit the changes
        $conn->commit();
    }catch(PDOException $e){
        //roll back the changes on errors
        $conn->rollback();
        echo $e->getMessage();
    }

    // Shows the number of affected rows this is pointless (for insert 1 row it's always 1 or an error)
    //echo 'Affected rows : '. $stmt->rowCount();

}

事务就像为假装更改数据库（如果它是 INNODB 表），那么如果其中一个查询出现错误，则两者都会失败。

建议在创建相关记录时使用它们，这样您就不会留下孤立记录或行，而不会留下关系。