PHP MySQL插入到GET方法

Question

我正在尝试管理面板的工作。我下载了这个例子管理面板设计：http://medialoot.com/item/html5-admin-template/

HTML结构：http://pastebin.ubuntu.com/5940949/

我试过PHP代码，

<?php 
if(isset($_GET['submit'])){ 
    if($_FILES["carImage"]["error"] > 0){ 
    echo '<script type="text/javascript">alert('."File not upload" . $_FILES["carImage"]["error"].');</script>'; 
    }else{ 
     if(!is_dir("../inc/imj/cars")){ 
      mkdir("../inc/imj/cars"); 
     } 
     $carImage_ = "../inc/imj/cars".$_FILES["carImage"]["name"]; 
     move_uploaded_file($_FILES["carImage"]["tmp_name"],$carImage_); 

     mysql_query(" 

     INSERT INTO contents ('indexId','catId','carModelName','carCash','carImage','carAlt','carTitle','carKMH','carWeight','carWheelInch','carColur','info') 
     VALUES (NULL,'".$_GET['catId']."','".$_GET['carModelName']."','".$_GET['carCash']."','".$carImage_."','".$_GET['carAlt']."','".$_GET['carTitle']."','".$_GET['carKMH']."','".$_GET['carWeight']."','".$_GET['carWheelInch']."','".$_GET['carColur']."','".$_GET['info']."') 

     "); 

    } 
}  
?> 

我试图替代查询代码，

mysql_query(" 

INSERT INTO contents ('indexId','catId','carModelName','carCash','carImage','carAlt','carTitle','carKMH','carWeight','carWheelInch','carColur','info') 
VALUES (NULL,".$_GET['catId'].",".$_GET['carModelName'].",".$_GET['carCash'].",".$carImage_.",".$_GET['carAlt'].",".$_GET['carTitle'].",".$_GET['carKMH'].",".$_GET['carWeight'].",".$_GET['carWheelInch'].",".$_GET['carColur'].",".$_GET['info'].") 

"); 

我猜的文件不上传。所以不行。

因为错误;

注意：未定义指数：carImage在..

注意：未定义指数：更多资料在..

注：表contents.indexId是主键和自动递增。

如何解决才好呢？

感谢您的关注。

UPDATE

图片上传的问题是;

<?php 
$catId = isset($_GET['catId']) ? $_GET['catId'] : ""; 
$carModelName = isset($_GET['carModelName']) ? $_GET['carModelName'] : ""; 
$carCash = isset($_GET['carCash']) ? $_GET['carCash'] : ""; 
$carAlt = isset($_GET['carAlt']) ? $_GET['carAlt'] : ""; 
$carTitle = isset($_GET['carTitle']) ? $_GET['carTitle'] : ""; 
$carKMH = isset($_GET['carKMH']) ? $_GET['carKMH'] : ""; 
$carWeight = isset($_GET['carWeight']) ? $_GET['carWeight'] : ""; 
$carWheelInch = isset($_GET['carWheelInch']) ? $_GET['carWheelInch'] : ""; 
$carColur = isset($_GET['carColur']) ? $_GET['carColur'] : ""; 
$info = isset($_GET['info']) ? $_GET['info'] : ""; 
if(isset($_GET['submit'])){ 
    if($_FILES["carImage"]["error"] > 0){ 
    echo '<script type="text/javascript">alert('."File not upload" . $_FILES["carImage"]["error"].');</script>'; 
    }else{ 

     $carUrl_ = "../inc/imj/urun"; 
     if(!is_dir($carUrl_)){mkdir($carUrl_);} 

     $carImage_ = $carUrl_.$_FILES["carImage"]["name"]; 
     $carUrlName = $_FILES["carImage"]["name"]; 
     move_uploaded_file($_FILES["carImage"]["tmp_name"],$carImage_); 

     mysql_query(" 

     INSERT INTO contents ('indexId','catId','carModelName','carCash','carImage','carAlt','carTitle','carKMH','carWeight','carWheelInch','carColur','info') 
     VALUES (".$catId.",".$_GET['carModelName'].",".$_GET['carCash'].",".$carUrlName.",".$carAlt.",".$carTitle.",".$carKMH.",".$carWeight.",".$carWheelInch.",".$carColur.",".$info.") 

     "); 

    } 
}  
?> 

更新2

<?php 
$catId = isset($_GET['catId']) ? $_GET['catId'] : ""; 
$carModelName = isset($_GET['carModelName']) ? $_GET['carModelName'] : ""; 
$carCash = isset($_GET['carCash']) ? $_GET['carCash'] : ""; 
$carAlt = isset($_GET['carAlt']) ? $_GET['carAlt'] : ""; 
$carTitle = isset($_GET['carTitle']) ? $_GET['carTitle'] : ""; 
$carKMH = isset($_GET['carKMH']) ? $_GET['carKMH'] : ""; 
$carWeight = isset($_GET['carWeight']) ? $_GET['carWeight'] : ""; 
$carWheelInch = isset($_GET['carWheelInch']) ? $_GET['carWheelInch'] : ""; 
$carColur = isset($_GET['carColur']) ? $_GET['carColur'] : ""; 
$info = isset($_GET['info']) ? $_GET['info'] : ""; 
if(isset($_GET['submit'])){ 

     mysql_query(" 

     INSERT INTO contents ('indexId','catId','carModelName','carCash','carImage','carAlt','carTitle','carKMH','carWeight','carWheelInch','carColur','info') 
     VALUES (".$catId.",".$_GET['carModelName'].",".$_GET['carCash'].",tryImg.png,".$carAlt.",".$carTitle.",".$carKMH.",".$carWeight.",".$carWheelInch.",".$carColur.",".$info.") 

     "); 

}  
?> 

Answer 1

对于获取每个变量，检查变量在MySQL INSERT语句中使用它之前设置。

$variable = (isset($_GET['variable'])) ? $_GET['variable'] : ""; 

而且不要插入indexId，它会自动增加，你可以从查询语句中删除它。

mysql_query(" 

INSERT INTO contents ('catId','carModelName','carCash','carImage','carAlt','carTitle','carKMH','carWeight','carWheelInch','carColur','info') 
VALUES (".$_GET['catId'].",".$_GET['carModelName'].",".$_GET['carCash'].",".$carImage_.",".$_GET['carAlt'].",".$_GET['carTitle'].",".$_GET['carKMH'].",".$_GET['carWeight'].",".$_GET['carWheelInch'].",".$_GET['carColur'].",".$_GET['info'].") 

"); 

更新

当用户离开一个字段为空，

isset($_GET['that-field']) 

返回false，即值未设置。

else isset返回true，即用户设置该变量的值。

所以你不能使用$ _GET ['var']而不知道var是否被赋予了一些值。 如果用户没有给出任何值，那么在将其输入到数据库之前，您必须自己设置它。

因此，使用，

if(isset($_GET['variable'])){ 
    $variable = $_GET['variable']; 
} else{ 
    $variable = ""; 
} 

你将不得不这样做对所有的变量，你运行MySQL查询之前，用'$variable'那里，而不是$_GET['variable']。