您的 mysqli_query 命令将返回 false。使用mysqli_error 诊断问题。
if (!mysqli_query($link, $query)) {
printf("Errormessage: %s\n", mysqli_error($link));
}
您需要进行上述检查才能确定,但您的查询问题可能与此部分有关,该部分未引用似乎是字符串值的内容:
if ($form_member_name !=0) {
$query .= "AND members.member_name = $form_member_name ";
}
$form_member_name 至少应该用单引号括起来,但您应该绝对为此使用参数化语句,而不是在查询中嵌入未经处理的变量,因为您让自己对SQL injection attack。这是一个修订版,但请记住,我对 mysqli 有点生疏,没有你的数据库就无法测试它:
$query = "
SELECT
photos.photo_id, members.member_name, photos.photo_title, photos.photo_film,
photos.photo_height, photos.photo_width
FROM members, photos
WHERE members.member_id = photos.member_id
";
$types = "";
$params = array();
if ($form_photo_title !="") {
$query.= "AND photos.photo_title = ? ";
$types .= "s";
$params[] = $form_photo_title;
}
if ($form_member_name !=0) {
$query .= "AND members.member_name = ? ";
$types .= "s";
$params[] = $form_member_name;
}
if ($form_type !="") {
$query .= "AND photo.photo_film = ? ";
$types .= "s";
$params[] = $form_type;
}
if (!($statement = mysqli_prepare($link, $query)))
throw new Exception(mysqli_error($link));
// this tells the statement to substitute those question marks with each of
// the values in the $params array. this is done positionally, so the first
// question mark corresponds to the first element of the array, and so on.
// the $types array is just a string with an indication of the type of the
// value stored at each position in the array. if all three of the above
// clauses are applied, then $types will equal "sss", indicating that the
// first, second and third elements in $params are string types.
// worse still, because the parameters to the query are dynamic, we can't
// call mysqli_stmt_bind_param directly as it does not allow an array to be
// passed, so we have to call it dynamically using call_user_func_array!
// i really hate this about mysqli.
// if all three of your above query clauses are applied, this call translates to
// mysqli_stmt_bind_param(
// $stmt, $types,
// $form_photo_title, $form_member_name, $form_type
// );
array_unshift($values, $stmt, $types);
call_user_func_array("mysqli_stmt_bind_param", $values);
mysqli_stmt_execute($stmt);
// this instructs mysqli to assign each field in your query to each of
// these variables for each row that is returned by mysqli_stmt_fetch().
// this is also positional - if you change the order or number of fields
// in your query, you will need to update this.
mysqli_stmt_bind_result($photo_id, $member_name, $photo_title, $photo_film, $photo_height, $photo_width);
while (mysqli_stmt_fetch($stmt)) {
// $photo_id will be reassigned to the value from the row on each
// loop iteration
echo $photo_id."<br />";
}
我忘记了 mysqli 扩展是多么可怕的野兽——如果你可以访问PDO extension,我
不能更强烈地建议您学习并使用它。