我有一个简单的代码,其中表被创建和修改,但表不是创建开始,并出现以下错误:
未定义变量:price在第28行
未定义变量:第28行newbrand
未定义变量:newprice在第28行
28行:
$conexion-> modify("Mitsubishi",40000000,$price,$newbrand,$newprice);
完整代码:
<?php
class MyDataBase{
private $link;
public function __construct($server,$user,$password,$base){
//Conectar
$this->link = mysql_connect($server,$user,$password);
mysql_select_db($base,$this->link);
}
public function insert($model,$brand,$price){
mysql_query("INSERT INTO autos (model, brand, price) VALUES ($model,'$brand', $price)",$this->link);}
public function modify($model,$brand,$price,$newbrand,$newprice){
mysql_query("UPDATE 'crautos'.'autos' SET 'brand' = '$newbrand',
'price' = '$newprice' WHERE 'autos'.'model' =5 AND 'autos'.'brand' = '$brand' AND 'autos'.'price' ='$price' LIMIT 1" ,$this->link);}
public function __destruct(){
//desconectar
}
}
$conexion = new MyDataBase ('localhost', 'root', '','crcars');
$conexion-> insert(05,"Ford",50000000);
$conexion-> modify("Mitsubishi",40000000,$price,$newbrand,$newprice);
?>
$conexion-> modify("Mitsubishi",40000000,$price,$newbrand,$newprice);
您从未设置$price, $newbrand, $newprice的值。而且你没有转义你的数据:
public function insert($model,$brand,$price){
$model = mysql_real_escape_string($model);
$brand = mysql_real_escape_string($brand);
$price = (int)$price;
mysql_query("INSERT INTO autos (model, brand, price) VALUES ('$model','$brand', $price)",$this->link);
}
对于修改也是一样,您应该转义您的数据参见:http://php.net/manual/fr/function.mysql-real-escape-string.php