数据库不更新(集成在woocommerce)

假设tbl_stored_address.id是int，则:

WHERE tbl_stored_address.id ='".$theID."'

将不匹配任何内容。使用

WHERE tbl_stored_address.id =".$theID."

也就是说，你不应该使用mysql_函数，并且绝对不应该使用字符串连接来构建查询。也就是说，这是你的脚本更新使用MySQLi扩展:

<?php
    function dbConnect() 
    {
        $db_host = 'xxx.xxx.com';
        $db_un = 'xxxx';
        $db_pass = 'xxxx';
        $db_name = 'xxxx';
        $conn = mysqli_connect($db_host, $db_un, $db_pass, $db_name) or die(mysqli_error());       
    }
    dbConnect();
    function getAddys() 
    {
        $user_id = '96.48.1.29'; //get user IP
        $query = "SELECT tbl_stored_address.address, tbl_stored_address.id FROM tbl_stored_address WHERE tbl_stored_address.ip_address = '" . $user_id . "';";
        $result = mysqli_query($conn, $query) or die(mysqli_error($conn));
        //saves number of rows returned
        $rowCount = mysqli_num_rows($conn, $result);
        echo "<form enctype='multipart/form-data' action='form-checkout.php' method='post'>";
        while ($row = mysqli_fetch_assoc($conn, $result))
        {
            echo "<textarea name='address".$row['id']."' id='address" . $row['id'] . "'>" . $row['address'] . "</textarea><br/>";
        }
        echo "<br/><input type='submit' value='Update Note(s)' name='updateNote'/><br/>";
        echo "</form>";
    }
    //this will check if the user clicked on "update" for a note, and then update the correct notes using the ID
    if(isset($_POST['updateNote']))
    {
        $user_id = '96.48.1.29'; //get user IP
        $query = "SELECT tbl_stored_address.id FROM tbl_stored_address WHERE tbl_stored_address.ip_address = '" . $user_id . "';";
        $result = mysqli_query($conn, $query) or die(mysqli_error($conn));
        while ($row = mysqli_fetch_assoc($conn, $result))
        {
            if((isset($_POST['address' . $row['id']])))
            {
                $value = $_POST['address' . $row['id']];
                $theID = $row['id'];
                $query2 = "UPDATE tbl_stored_address SET tbl_stored_address.address = '" . mysqli_real_escape_string($conn, $value) . "' WHERE tbl_stored_address.id = " . $theID . ";";
                $result2 = mysqli_query($conn, $query2) or die(mysqli_error($conn));
            }
        }
    }  
?>
<h2>Delivery Address</h2><br /><br />
<?php getAddys(); ?>

MySQLi扩展将参数的顺序与您可能习惯的顺序相反，连接是第一个参数。与MySQL扩展一样，如果省略connection对象，扩展函数将尝试重用现有的打开连接。

因为我们真的不想在SQL中使用字符串连接，你需要熟悉使用准备语句，这是mysql扩展支持的。下面是你的代码和准备好的语句:

<?php
    function dbConnect() 
    {
        $db_host = 'xxx.xxx.com';
        $db_un = 'xxxx';
        $db_pass = 'xxxx';
        $db_name = 'xxxx';
        $conn = mysqli_connect($db_host, $db_un, $db_pass, $db_name) or die(mysqli_error());  
    }
    dbConnect();
    function getAddys() 
    {
        $user_id = '96.48.1.29'; //get user IP
        if ($query = mysqli_prepare($conn, "SELECT tbl_stored_address.address, tbl_stored_address.id FROM tbl_stored_address WHERE tbl_stored_address.ip_address = ?;")) 
        {
            mysqli_stmt_bind_param($query, "s", $user_id); # 's' indicates that this parameter is a string
            mysqli_stmt_execute($query);
            mysqli_stmt_bind_result($query, $row);
            echo "<form enctype='multipart/form-data' action='form-checkout.php' method='post'>";
            while (mysqli_stmt_fetch(($query))
            {
                echo "<textarea name='address" . $row['id'] . "' id='address" . $row['id'] . "'>" . $row['address'] . "</textarea><br/>";
            }
            echo "<br/><input type='submit' value='Update Note(s)' name='updateNote'/><br/>";
            echo "</form>";
            mysqli_stmt_close($query); 
        }
    }
    //this will check if the user clicked on "update" for a note, and then update the correct notes using the ID
    if(isset($_POST['updateNote']))
    {
        $user_id = '96.48.1.29'; //get user IP
        if ($query = mysqli_prepare($conn, "SELECT tbl_stored_address.address, tbl_stored_address.id FROM tbl_stored_address WHERE tbl_stored_address.ip_address = ?;")) 
        {
            mysqli_stmt_bind_param($query, "s", $user_id); # 's' indicates that this parameter is a string
            mysqli_stmt_execute($query);
            mysqli_stmt_bind_result($query, $row);
            while (mysqli_stmt_fetch(($query))
            {
                if((isset($_POST['address' . $row['id']])))
                {
                    $value = $_POST['address' . $row['id']];
                    $theID = $row['id'];
                    if ($updateQuery = mysqli_prepare($conn, "UPDATE tbl_stored_address SET tbl_stored_address.address = ? WHERE tbl_stored_address.id = ?;")) 
                    {
                        $updateQuery = "UPDATE tbl_stored_address SET tbl_stored_address.address = ? WHERE tbl_stored_address.id = ?;";
                        mysqli_stmt_bind_param($updateQuery, "s", $value); # 's' indicates that this parameter is a string
                        mysqli_stmt_bind_param($updateQuery, "i", $theID); # 'i' indicates that this parameter is an integer
                        mysqli_stmt_execute($updateQuery);
                    }
                }
            }
            mysqli_stmt_close($query); 
        }
    }  
?>
<h2>Delivery Address</h2><br /><br />
<?php getAddys(); ?>

上面的代码可能有错误，因此请谨慎使用

你可以在PHP.net网站上找到学习MySQLi扩展所需的一切:http://php.net/manual/en/book.mysqli.php。您还可以找到PDO的文档，这是我在PHP中编写代码时使用的最后一个扩展名。