表单不会将数据提交到 MySQL 数据库

Question

我有一个包含我的 html 表单的文件和另一个包含以下代码的 php 文件。当我单击提交按钮时，我能够成功连接。但是当我在 phpMyAdmin 控制面板中刷新我的数据库时。没有数据被推送到我的数据库中。

HTML 表单

<form class="well" id="contactForm" name="sendMsg" novalidate="" action="contact_form.php" method="post">
        <div class="control-group">
            <div class="controls">
                <input class="form-control" name="fullname" id="name" type="text" placeholder="Full Name" required="" data-validation-required-message="Please enter your name" />
            </div>
        </div>
        <div class="control-group">
            <div class="controls">
                <input class="form-control" name="phonenumber" id="phone" type="text" placeholder="Phone Number" required="" data-validation-required-message="Please enter your phone number" />
            </div>
        </div>
        <div class="control-group">
            <div class="controls">
                <input class="form-control" name="emailaddress" id="email-address" type="email" placeholder="Email Address" required="" data-validation-required-message="Please enter your email" />
            </div>
        </div>
        <div class="control-group">
            <div class="controls">
                <textarea rows="6" class="form-control" name="message" id="msg" type="msg" placeholder="Enter detailed question/concern, and we will get back to you." required="" data-validation-required-message="Please enter your question/concern"></textarea>
            </div>
        </div>
        <div class="control-group">
            <div class="controls submit-btn">
                <button class="btn btn-primary" type="submit" value="Submit">Submit</button>
            </div>
        </div>
    </form>

CONTACT_FORM.PHP

<?php

define('DB_NAME', 'xxx');
define('DB_USER', 'xxx');
define('DB_PASSWORD', 'xxx');
define('DB_HOST', 'xxx');

$connection = mysqli_connect(DB_HOST, DB_USER, DB_PASSWORD);

if(!$connection){
die('Database connection failed: ' . mysqli_connect_error());
}

$db_selected = mysqli_select_db($connection, DB_NAME);

if(!$db_selected){
die('Can\'t use ' .DB_NAME . ' : ' . mysqli_connect_error());
}

echo 'Connected successfully';

$name = @$_POST ['fullname'];
$phone = @$_POST ['phonenumber'];
$email = @$_POST ['emailaddress'];
$msg = @$_POST ['message'];

$sql = "INSERT INTO contact_form (fullname, phonenumber, emailaddress, message) VALUES ('$name',   '$phone', '$email', '$msg')";

if (!mysqli_query($connection, $sql)){
die('Error: ' . mysqli_connect_error($connection));
}
?>

Answer 1

首先使用那个结构：

if (isset($_POST['fullname'])) {
    $name = $_POST['fullname'];
}

其他值以此类推。

或者更好：-

$name = isset($_POST['fullname']) ? $_POST['fullname'] : '';

这样，$name 字段总是设置为某个值，这样您以后在代码中尝试使用它时就不会出错

Answer 2

很明显，您没有为列 ID 传递值，而是您更改了 AUTO_INCREMENT 列， 第 1 步：点击更改列 ID 第 2 步：检查 A_I (AUTO_INCREMENT)

第 3 步：点击保存

或者您也可以通过其他方式传递 ID 值，如下所示：

$name = @$_POST ['fullname'];
$phone = @$_POST ['phonenumber'];
$email = @$_POST ['emailaddress'];
$msg = @$_POST ['message'];
$id = 1 // Set value for ID

$sql = "INSERT INTO contact_form (ID, fullname, phonenumber, emailaddress, message) VALUES ($id, '$name',   '$phone', '$email', '$msg')";

Answer 3

从$_POST 变量中删除@ 符号，您还需要删除空格。我想让您知道，您很容易受到 SQL 注入的影响，而无需在插入这些值之前对其进行清理/验证，请使用 ctype 或 filter_var。最后，我建议您将排序规则从 latin1 更改为 utf8，除非您对该字符集有特定原因。

$phone 之前的插入值中有一些额外的空格，这可能导致它失败

VALUES ('$name',   '$phone', '$email', '$msg')

正如另一个答案中所述，在尝试使用变量之前，您始终需要验证变量中是否存在数据。此外，如果您在 `contact_form.php 中重定向，请务必在退出时显示失败消息，否则您可能永远看不到它们。

if($_POST['fullname']){
    $name = $_POST['fullname']
}else{
    echo "name not received";
    exit;
}
if($_POST['phonenumber']){
    $phone = $_POST['phonenumber']
}else{
    echo "phone not received";
    exit;
}
if($_POST['emailaddress']){
    $email = $_POST['emailaddress']
}else{
    echo "email not received";
    exit;
}
if($_POST['message']){
    $msg = $_POST['message']
}else{
    echo "message not received";
    exit;
}

$sql = "INSERT INTO contact_form (fullname, phonenumber, emailaddress, message) 
        VALUES ('$name', '$phone', '$email', '$msg')";

if (!mysqli_query($connection, $sql)){
die('Error: ' . mysqli_connect_error($connection));
}

Answer 4

$sql = "INSERT INTO contact_form 
        (fullname, phonenumber, emailaddress, message) 
        VALUES ('$name',   '$phone', '$email', '$msg')";

使用" 而不是'