如何将表单和三个 mysql 表中的数据结合起来，用 php 在另一个表中插入数据？

Question

sql="INSERT INTO maticna
   (formCompany,formPlace,formDate,formPerson,formCollect
   ,formOffer,formDescribe,formBarkod,formSubject,formWorking
   ,formStatus,formRevision) 
SELECT 
  company.formCompany, company.formPlace
  , $formDate AS formDate
  , $formPerson AS formPerson
  , $formCollect AS formCollect
  , $formOffer AS formOffer
  , $formDescribe AS formDescribe
  , $formBarkod AS formBarkod
  , inv.formSubject, work.rnNo
  , $formStatus AS formStatus
  , $formRevision AS formRevision)"
 ."FROM company, inv, work 
 WHERE inv.formBarkod='$formBarkod'";

这段代码有什么问题吗？任何人都可以提供此代码或更好的方法吗？

Answer 1

$formDate = mysql_real_escape_string($formdate);
$formPerson = mysql_real_escape_string($formPerson);
....
//For each and every $var you inject in the SQL statement.

$sql="INSERT INTO maticna
   (formCompany,formPlace,formDate,formPerson,formCollect
   ,formOffer,formDescribe,formBarkod,formSubject,formWorking
   ,formStatus,formRevision) 
SELECT 
  c.formCompany, c.formPlace
  , '$formDate' AS formDate
  , '$formPerson' AS formPerson
  , '$formCollect' AS formCollect
  , '$formOffer' AS formOffer
  , '$formDescribe' AS formDescribe
  , '$formBarkod' AS formBarkod
  , i.formSubject, w.rnNo
  , '$formStatus' AS formStatus
  , '$formRevision' AS formRevision
FROM company c
INNER JOIN work w ON (w.id = i.work_id)
INNER JOIN inv i ON (i.company_id = c.id)
WHERE i.formBarkod= '$formBarkod' ";

你犯的错误
1、不要使用隐式连接语法，会导致交叉连接；始终使用显式连接语法。
2. 您没有任何加入条件。
3. 所有的 $vars 都需要被转义。
4. 所有的 $vars，无论是数字还是不需要在 SQL 语句中引用。
5. 插入语句中的小语法错误。

Answer 2

你不应该在选择之前插入 VALUES 吗？

INSERT INTO maticna (...) VALUES (SELECT ...)