1.sql注入

1. PHPmysql基本函数

1. mysqli_connect()函数

mysqli_connect(host,username,password,dbname,port,socket);

 <?php
$con=mysqli_connect("localhost","wrong_user","my_password","my_db");
// 检查连接
if (!$con)
{
    die("连接错误: " . mysqli_connect_error());
}
?> 

b.mysqli_query()函数

mysqli_query(connection,query,resultmode);

<?php 
// 假定数据库用户名：root，密码：123456，数据库：RUNOOB 
$con=mysqli_connect("localhost","root","123456","RUNOOB"); 
if (mysqli_connect_errno($con)) 
{ 
    echo "连接 MySQL 失败: " . mysqli_connect_error(); 
} 
 
// 执行查询
mysqli_query($con,"SELECT * FROM websites");
mysqli_query($con,"INSERT INTO websites (name, url, alexa, country)
VALUES ('百度','https://www.baidu.com/','4','CN')");
 
mysqli_close($con);
?>

c.mysqli_fetch_array()函数

mysqli_fetch_array(result,resulttype);

<?php 
// 假定数据库用户名：root，密码：123456，数据库：RUNOOB 
$con=mysqli_connect("localhost","root","123456","RUNOOB"); 
if (mysqli_connect_errno($con)) 
{ 
    echo "连接 MySQL 失败: " . mysqli_connect_error(); 
} 
 
$sql="SELECT name,url FROM websites ORDER BY alexa";
$result=mysqli_query($con,$sql);
 
// 数字数组
$row=mysqli_fetch_array($result,MYSQLI_NUM);
printf ("%s : %s",$row[0],$row[1]);
 
// 关联数组
$row=mysqli_fetch_array($result,MYSQLI_ASSOC);
printf ("%s : %s",$row["name"],$row["url"]);
 
// 释放结果集
mysqli_free_result($result);
 
mysqli_close($con);
?>

dmysqli_close()

 <?php
$con=mysqli_connect("localhost","my_user","my_password","my_db");

// ....一些 PHP 代码...

mysqli_close($con);
?>