【发布时间】:2014-06-17 09:24:10
【问题描述】:
<?php
include_once 'database_connect.php';
$conn = new dbconnection();
$dbcon = $conn->connect();
if (!$dbcon) {
die("Fail".mysqli_error($dbcon));
}
?>
<html>
<head>
<title></title>
<script type="text/javascript"></script>
</head>
<body>
<form name="frm" method="post" action='<?php echo $_SERVER['PHP_SELF']; ?>'>
<table width="50%" border="1" cellpadding="3" cellspacing="3" align="center">
<?php
$value1 = array();
$select_query = "SELECT Distinct branch FROM subjects";
$result = mysqli_query($dbcon, $select_query);
if (!$result) {
die("Fail".mysqli_error($dbcon));
}
while ($row = mysqli_fetch_array($result)) {
$value1[] = $row['branch'];
}
?>
<tr>
<td>Branch
<td><select name="branch" id="branch" onchange="document.frm.submit();">
<option>Select Branch</option>
<?php
foreach ($value1 as $gets)
echo "<option value={$gets}>{$gets}</option>";
?>
</select>
<?php
$value2 = array();
if (isset($_POST['branch'])) {
$branch = $_POST['branch'];
$getsub_query = "SELECT sub_code FROM subjects where branch='$branch'";
$result2 = mysqli_query($dbcon, $getsub_query);
if (!$result2) {
die("Fail\n".mysqli_error($dbcon));
}
while ($row1 = mysqli_fetch_array($result2)) {
$value2[] = $row1['sub_code'];
}
}
?>
<tr>
<td>Subject Code
<td><select name="subcode" id="subcode">
<option>Subject Code</option>
<?php
foreach ($value2 as $gets)
echo "<option value={$gets}>{$gets}</option>";
?>
</select>
此代码从数据库中获取第一个下拉列表分支。当我们从中选择值时,第二个下拉列表会从数据库中填充。但问题是当我在第一个下拉列表中选择选项时,所选选项不会保留在第一个下拉列表中。但第二个下拉列表正确填写。我希望我选择的那个选项应该保持选中状态。就像它的状态应该改变。我认为第一个下拉列表会在表单加载时再次填充。
【问题讨论】:
-
附带说明,您不应该将 sql 请求写为 "SELECT sub_code FROM subject where branch='$branch'" ;这存在一个巨大的安全问题。如果 $branch = "';DELETE FROM Subjects WHERE '' = '" 它可能会毁掉你的桌子。查找“SQL 注入”以获取更多信息
-
危险:你很容易受到SQL injection attacks的影响,你需要defend你自己。
标签: javascript php html