mysql_escape_string c_Linux C 调用MYSQL API 函数mysql_escape_string()转义插入数据

Title:Linux C 调用MYSQL API 函数mysql_escape_string()转义插入数据 --2013-10-11 11:57

#include

#include

#include

#include "mysql.h"

int main(int argc, char *argv[])

{

MYSQL my_connection;

int res;

mysql_init(&my_connection);

char UNAMES[50];

char sql_insert[400];

char *p[5];

p[0]="123456";

p[1]="Fuc'a'k";

p[2]="127.0.0.1";

p[3]="2013-09-26 10:10:10";

p[4]="1";

/*mysql_real_connect(&mysql,host,user,passwd,dbname,0,NULL,0) == NULL)*/

if (mysql_real_connect(&my_connection, "127.0.0.1", "root", "FuckFuck","databasename",0,NULL,CLIENT_FOUND_ROWS))

{

printf("Connection success\n");

mysql_escape_string(UNAMES,p[1],strlen(p[1]));

snprintf(sql_insert, sizeof(sql_insert),"insert into `tablename` (`C1`,`C2`,`C3`,`C4`,`C5`) values ('%s','%s','%s','%s','%s');",p[0],UNAMES,p[2],p[3],p[4]);

res = mysql_query(&my_connection,sql_insert);

if (!res)

{

printf("Inserted %lu rows\n",(unsigned long)mysql_affected_rows(&my_connection));

printf("%s------\n",sql_insert);

printf("%s------\n",UNAMES);

/*里头的函数返回受表中影响的行数*/

}

else

{

//分别打印出错误代码及详细信息

fprintf(stderr, "Insert error %d: %s\n",mysql_errno(&my_connection),mysql_error(&my_connection));

}

mysql_close(&my_connection);

}

else

{

fprintf(stderr, "Connection failed \n");

if (mysql_errno(&my_connection))

{

fprintf(stderr, "Connection error %d: %s\n",mysql_errno(&my_connection),mysql_error(&my_connection));

}

}

return EXIT_SUCCESS;

}