我正在尝试将我的tic tac toe游戏结果输出到数据库.但是,只要两个客户端之间的匹配完成,我就会遇到此错误.这是我的服务器端代码的摘录和错误消息:
数据库类:
import java.sql.*;
import java.util.*;
import javax.swing.JOptionPane;
class Database {
final String JDBC_DRIVER = "org.apache.derby.jdbc.ClientDriver";
final String DB_URL = "jdbc:derby://localhost:1527/Mini Project";
// Database credentials
final String USER = "Joe";
final String PASS = "plateau";
Connection conn;
Statement stmt;
public Database() {
try {
Class.forName("org.apache.derby.jdbc.ClientDriver");
System.out.println("Connecting to database...");
conn = DriverManager.getConnection(DB_URL, USER, PASS);
//STEP 4: Execute a query
System.out.println("Creating statement...");
stmt = (Statement) conn.createStatement();
} catch (SQLException ex) {
ex.printStackTrace();
} catch (ClassNotFoundException ex) {
ex.printStackTrace();
}
} …Run Code Online (Sandbox Code Playgroud) import pypyodbc as pyodbc
model_name = 'test'
model_name1 = Master_Cursor.execute("select col1,col2,col3 from tablename where col3 like '%s' order by col3" %(model_name)).fetchall()
Run Code Online (Sandbox Code Playgroud)
上面的代码返回一条匹配的记录model_name = test。我如何取回其他记录model_name=123test123,abctestabc,ABCtestABC等?
基本上是在寻找
select col1,col2,col3 from tablename where col3 like '%test%'.
Run Code Online (Sandbox Code Playgroud) 我在 MySQli 中使用 PHP,我想从整个 SQL DB 中获取一行,这符合我的条件。只是为了说明,这就是我当前的数据库的样子:
我想得到那一行,例如。txnid列的值 == $txnid (a variable)。我试图建立SQL查询这将满足我的要求,这里是它的样子:$sql = "SELECT * FROM 'table1' WHERE 'txnid' = " . $txnid;。当我在 phpMyAdmin 中原始运行此查询时,它按预期工作。我只想知道,在我在 PHP 中运行查询之后,如何使用 MySQLi 获取作为查询响应的那一行数据?
这是我用来运行查询的代码:
$servername = "localhost";
$username = "XXXXXXXXXXXXXX";
$password = "XXXXXXXXXXXXXX";
$dbname = "XXXXXXXXXXXXXXXX";
$conn = new mysqli($servername, $username, $password, $dbname);
if ($conn->connect_error) {
die("Connection failed: " . $conn->connect_error);
}
$txnid = $_GET['id'];
$sql = "SELECT * FROM `testtable1` WHERE `txnid` = " . $txnid;
if ($conn->query($sql) …Run Code Online (Sandbox Code Playgroud) 可能重复:
XKCD sql注入 - 请解释
什么是SQL注入?
我看过"SQL注入"一词,但仍然不理解它.它是什么?
该代码有什么问题?
$ sql =“选择*来自博客的地方blog_id = $'blog_id'”; $ result = mysql_query($ sql); $ rows = mysql_fetch_array($ result); $ content = $ rows ['blog_content']; echo $ content;
错误是:警告:mysql_fetch_array():提供的参数在第3行的C:\ Program Files \ xampp \ htdocs \ jordan_pagaduan \ blog_delete_edit.php中不是有效的MySQL结果资源。
我的代码:
$fileid = $_GET['imgid'];
$fileid = (int)$fileid; //id is int type in photos table
require 'database.php';
//get the image sourc name
$q = "SELECT src form photos WHERE id='$fileid'";
$result = $mysqli->query($q) or die(mysqli_error($mysqli));
if ($result)
{
$row = $result->fetch_object();
$filename = $row->src;
Run Code Online (Sandbox Code Playgroud)
错误:您的SQL语法有错误; 查看与您的MySQL服务器版本对应的手册,以便在第1行的'photos WHERE id = '12''附近使用正确的语法
这个登录代码有什么问题?相同的代码在我编程的不同网站上工作
这是登录表单:
<html>
<head>
<meta http-equiv="content-type" content-type="text/html; charset=windows-1255">
<title>?????!</title>
</head>
<body dir="rtl">
<center>
<form action="loginaction.php" method="post">
?? ?????:<input type="text" name="username" value=""><br>
?????:<input type="password" name="password" value=""><br>
<input type="submit" value="?????!"><br>
</form>
<br>
<?php
$error=$_GET['error'];
if ($error==1) {
echo "?? ?????? ?? ?????? ?? ??????!";
}
;
?>
</center>
</body>
</html>
Run Code Online (Sandbox Code Playgroud)
这是登录操作代码:
<?php
include('config.php');
$username=$_GET['username'];
$password=$_GET['password'];
$userpassword=md5($password);
$checkquery=mysql_query("SELECT * FROM `users` WHERE `username`='$username' AND `password`='$userpassword'");
if (mysql_num_rows($checkquery)>0) {
$row=mysql_query("SELECT `userid` FROM `users` WHERE `username`='$username' AND `password`='$userpassword'");
$data=mysql_fetch_array($row);
$userid=$data['userid'];
setcookie("userid", $userid);
setcookie("username", $username);
setcookie("userpassword", …Run Code Online (Sandbox Code Playgroud)