weixin_33722405 2014-12-16 12:38 采纳率: 0%
浏览 23

不返回确切值

email value is passed from one page to another through the following

  $.ajax({
type:'post',
    url:'email.php',
    data:{email: email},
    success:function(msg){
    alert(msg);         
    }
 });

$s show the email id.I echoed $echeck and $echk for testing. $echk doesn't return 1.

  $s=$_POST['email'];
  echo $echeck="select email from register where email=".$_POST['email'];
  echo $echk=mysql_query($echeck);
  echo $ecount=mysql_num_rows($echk);
  • 写回答

2条回答 默认 最新

  • ??yy 2014-12-16 12:42
    关注

    You are providing a string without quotes in your query.

    Try:

    echo $echeck="select email from register where email='".mysql_real_escape_string($_POST['email'])."'";
    

    The mysql_real_escape_string is there to avoid nastiness when $_POST['email'] contains quotes, or worse.

    评论

报告相同问题?