PDO预处理防sql注入

最新推荐文章于 2024-09-16 22:16:18 发布

我就SEI我啊

最新推荐文章于 2024-09-16 22:16:18 发布

阅读量1.1k

点赞数

本文链接：https://blog.csdn.net/lxcboke/article/details/51637608

版权

$pdo=new PDO('mysql:host=127.0.0.1;dbname=ci','root','root',array(PDO::MYSQL_ATTR_INIT_COMMAND=>'set names utf8'));
$arr=$pdo->prepare("insert into ceshi(ip,country,province,city,district,carrier)VALUE (?,?,?,?,?,?)");
$arr->bindParam(1,$ar['retData']['ip']);
$arr->bindParam(2,$ar['retData']['country']);
$arr->bindParam(3,$ar['retData']['province']);
$arr->bindParam(4,$ar['retData']['city']);
$arr->bindParam(5,$ar['retData']['district']);
$arr->bindParam(6,$ar['retData']['carrier']);
if($arr->execute()){
    echo "插入成功";
    echo "最后插入的ID:".$pdo->lastInsertId();
}else{
    echo "插入失败";
}