小编mjv*_*mjv的帖子

<?php
$con=mysql_connect("localhost","mts","mts");
if(!con)
{
die('unable to connect' . mysql_error());
}

mysql_select_db("mts",$con);

/*
date_default_timezone_set ("Asia/Calcutta"); 
$date = date('d/m/Y h:i:s a', time());
echo date("d/m/Y h:i:s a", time());
*/

date_default_timezone_set ("Asia/Calcutta"); 
$cd=date("d/m/Y");
echo $cd;

echo "<br>";
$con=mysql_connect("localhost","mts","mts");
if(!con)
{
die('unable to connect' . mysql_error());
}
$res=mysql_query("select ElpDur,DateTime from doctor_upload");
$i=0;
while($row=mysql_fetch_array($res))
{
$elp[i]=$row['ElpDur'];
$dt=$row['DateTime'];
//$b[i]=$elp;

echo $elp;
echo "<br>";
echo $dt;

$diff[i]=$cd-$dt;
$a[i]=$elp[i]-$diff[i];
echo $diff[i];
echo $a[i];
if($diff[i]<elp[i])
{
echo $a[i]."days";
}
else
{
echo "expire";
}
$i++;
}


mysql_close($con);


?>

在学习的某个地方,我发现了一些有趣的东西..它说的内容如下:

$query = sprintf("SELECT firstname, lastname, address, age FROM friends 
WHERE firstname='%s' AND lastname='%s'",mysql_real_escape_string($firstname),
    mysql_real_escape_string($lastname));

使用这样的查询代替

$query="select firstname, lastname, address, age FROM friends
WHERE firstname='".$_RETURN['name1']."', lastname='".$_RETURN['name2']."'";

这看起来是否合理..你有没有试过这种编码......以及它如何帮助防止任何恶意攻击..

我在while循环中遇到了一些问题.我在eclipse上运行它,我输入了源代码:

a = raw_input("Mom im hungry!!!!!! FEED MEEEEE" )
while a != "Feed yourself":
    print("Thats gross")

结果是当我输入错误的答案时,它会响应:

Thats gross 
thats gross 

等等.

我想检查在文本框中输入的字符串的大小.我错过了什么？

var com = document.getElementById("comment").value;
if(com.lenght <= 100){
 alert("good");
} else {
 alert("bad");
}