好的，对于初学者来说，我在MySQL中有一个表，其中包含"条形码"，"描述"和"数量"列。我有两个页面，一个HTML和1个PHP。HTML 中有一个表单，用于接受条形码扫描或手动文本输入。基于该条目，我希望它返回一行，从在 HTML 表单上输入的条形码开始。到目前为止，我可以输入任何内容，它将返回整个表。
HTML 如下所示：
<head>
<font color="00CC00">
<title>Search</title>
</head>
<body bgcolor="000000">
<h2>Find Product</h2>
<form name="search" method="post" action="Barcode Search.php">
<input type="text" name="find" placeholder="Click to Scan" />
<input type="submit" name="search" value="Submit" />
</form>
</body>
</html>
简短，甜蜜，切中要害！这。PHP 看起来像这样：
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<title>Inventory List</title>
<body bgcolor="000000">
<font color="00cc00">
<?php
//Table
echo "<table style='border: solid 1px green;'>";
echo "<tr><th>Barcode</th><th>Description</th><th>Quantity</th></tr>";
class TableRows extends RecursiveIteratorIterator {
function __construct($it) {
parent::__construct($it, self::LEAVES_ONLY);
}
function current() {
return "<td style='width:150px;border:1px solid green;'>" . parent::current(). "</td>";
}
function beginChildren() {
echo "<tr>";
}
function endChildren() {
echo "</tr>" . "'n";
}
}
//Connection Info
$servername = "127.0.0.1";
$username = "XXXX";
$password = "XXXXX";
$dbname = "test";
//Connection Started, Data pulled
try {
$conn = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password);
$conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$stmt = $conn->prepare("SELECT * FROM inventory ");
$stmt->execute();
// set the resulting array to associative
$result = $stmt->setFetchMode(PDO::FETCH_ASSOC);
foreach(new TableRows(new RecursiveArrayIterator($stmt->fetchAll())) as $k=>$v) {
echo $v;
}
}
//Error Check
catch(PDOException $e) {
echo "Error: " . $e->getMessage();
}
// Take Text entry and fetch the SQL Row
//Kill Connection
$conn = null;
echo "</table>";
?>
</center>
</body>
</html>
我非常感谢正确的方向！提前感谢！
SELECT * FROM inventory从inventory表中选择所有内容，没有改进或限制。我猜你想要这样的东西：
$stmt = $conn->prepare("SELECT * FROM inventory WHERE barcode = ? LIMIT 1");
$stmt->bindParam("s", $_POST["find"]); // 's' means it's a string
$stmt->execute();
http://php.net/manual/en/mysqli.prepare.php
问题是你做了一个没有WHERE语句的SELECT * FROM inventory，所以你会从那个表中得到所有东西。你需要做的是添加一个绑定参数，使用这个：
//Connection Started, Data pulled
try {
$barcodeValue = isset($_POST['find']) ? $_POST['find'] : false;
if($barcodeValue === false) throw new PDOException("No Barcode Value");
$conn = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password);
$conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$stmt = $conn->prepare("SELECT * FROM inventory WHERE `barcode` = :barcodeToSearchFor");
$stmt->bindValue(':barcodeToSearchFor', $barcodeValue );
$stmt->execute();
// set the resulting array to associative
$result = $stmt->setFetchMode(PDO::FETCH_ASSOC);
foreach(new TableRows(new RecursiveArrayIterator($stmt->fetchAll())) as $k=>$v) {
echo $v;
}
}