使用 PHP 将会话变量添加到 MYSQL 查询中
声明：本页面是StackOverFlow热门问题的中英对照翻译，遵循CC BY-SA 4.0协议，如果您需要使用它，必须同样遵循CC BY-SA许可，注明原文地址和作者信息，同时你必须将它归于原作者（不是我）：StackOverFlow
原文地址: http://stackoverflow.com/questions/4968927/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me):
StackOverFlow
Adding session variable into MYSQL query using PHP
提问by Matt
Im trying to pass two variables into a mysql query, and its getting stuck when passing the session variable in below:
我试图将两个变量传递给一个 mysql 查询，并且在传递下面的会话变量时它卡住了：
$check = mysql_query("SELECT *
FROM Clients
WHERE Username = '$new_username'
AND Username != '$_SESSION['Username']'") or die(mysql_error());
Any tips? Thanks in advance.
有小费吗？提前致谢。
回答by Michiel Pater
It is because your single quotes '$_SESSION['Username']'have been ended by the value in the session. Changing this to '" . $_SESSION['Username'] . "'will solve the problem.
这是因为您的单引号'$_SESSION['Username']'已被会话中的值结束。将其更改为'" . $_SESSION['Username'] . "'将解决问题。
回答by Salman A
This will work but this is VERY, VERY BAD:
这会起作用，但这是非常非常糟糕的：
$check = mysql_query("
SELECT *
FROM Clients
WHERE Username = '$new_username'
AND Username != '{$_SESSION['Username']}'
") or die(mysql_error());
This too shall work and recommended way of doing it:
这也应该起作用并推荐这样做的方法：
$check = mysql_query("
SELECT *
FROM Clients
WHERE Username = '" . mysql_real_escape_string($new_username) . "'
AND Username <> '" . mysql_real_escape_string($_SESSION['Username']) . "'
") or die(mysql_error());
回答by Mārti?? Briedis
When you embed arrays in to strings, you have to seperate them by concatenating them or using curly braces.
当您将数组嵌入到字符串中时，您必须通过连接它们或使用花括号将它们分开。
$string = "text text {$array['key']} text";
or
或者
$string = "text text " . $array['key'] . " text";
回答by Crusader
Why no one say about "text text $array[key] text" syntax?
为什么没有人说“text text $array[key] text”语法？
SELECT *
FROM Clients
WHERE Username = '$new_username'
AND Username != '$_SESSION[Username]'
