我正在从sql数据库生成问题。我试着用问题id保存每个答案。
我得到这个错误:"错误:未知列'answer_text'在'字段列表'"怎么来的?
//save text input to sql with question id and question answer
$question_id = mysqli_real_escape_string($con, $_POST['question_id']);
foreach ($_POST['answer_text'] as $question_id => $answer_id){
$sql="INSERT INTO answers (question_id, answer_text)
VALUES ({$question_id}, {$answer_id})";
echo $sql;
if (!mysqli_query($con,$sql)) {
die('Error: ' . mysqli_error($con));
}
}
mysqli_close($con);
// generate question from database
if ($result) {
while($row = mysqli_fetch_array($result, MYSQLI_ASSOC)) {
$body = $row['question_body'];
$question_id = $row['question_id'];
echo '<div class="questions-4">';
echo '
<tr>
<td>'.$body.'</td>
<td><input type="text" name="answerswer_text['.$question_id.']" </td><br>
</tr>';
echo '</div>';
您容易受到SQL注入攻击,并且没有引用您在查询中使用的值。生成的内容相当于:
INSERT ... VALUES(foo, bar)
不是INSERT ... VALUES('foo', 'bar');
要解决当前的问题,至少应该有
VALUES ('{$question_id}', '{$answer_id}')";
^--------------^--^------------^--- these
这就解决了:
$sql="INSERT INTO answers (question_id, answer_value)
VALUES ({$question_id}, '$answer_id')";