摘要:<?php //創(chuàng)建對象,連接數(shù)據(jù)庫 $pdo = new PDO('mysql:host=127.0.0.1;dbname=edu','root','root'); //創(chuàng)建sql語句 $sql="INSERT INTO `pdo`(`name`,`email`,`password`
<?php //創(chuàng)建對象,連接數(shù)據(jù)庫 $pdo = new PDO('mysql:host=127.0.0.1;dbname=edu','root','root'); //創(chuàng)建sql語句 $sql="INSERT INTO `pdo`(`name`,`email`,`password`,`creat_time`) VALUES (:name,:email,:password,:creat_time);"; //驗證sql語句,創(chuàng)建預處理對象 $stmt=$pdo->prepare($sql); //參數(shù)綁定 $name='東方不敗'; $email='dong@qq.com'; $passsword=sha1('123456'); $creatTime=time(); $stmt->bindParam(':name',$name,PDO::PARAM_STR,20); $stmt->bindParam(':email',$email,PDO::PARAM_STR,100); $stmt->bindParam(':password',$passsword,PDO::PARAM_STR); $stmt->bindParam(':creat_time',$creatTime,PDO::PARAM_INT); //執(zhí)行添加 if($stmt->execute()){ //rowCount()返回受影響的記錄條數(shù) echo ($stmt->rowCount()>0) ? '成功添加了'.$stmt->rowCount().'條記錄':'沒有記錄被添加'; }else{ exit(print_r($stmt->errorInfo(),true)); }
批改老師:西門大官人批改時間:2019-03-03 11:38:47
老師總結(jié):pdo對數(shù)據(jù)庫的操作,bind充當著非常重要的安全作用,通過綁定參數(shù),pdo可以避免常見的sql注入攻擊