mysqli的语句，返回警告

Question

这里是我的代码：

include "db_conx.php"; 
$sql = mysqli_query("INSERT INTO table(column) VALUES('" . mysqli_real_escape_string($var) . "')"); 
if ($sql) {echo "connection successful"; 
} else { 
echo "failure"; 
} 

它返回这些错误：

Warning: mysqli_real_escape_string() expects exactly 2 parameters, 1 given 
Warning: mysqli_query() expects at least 2 parameters, 1 given 

我尝试使用PDO，但没有工作，要么...

Answer 1

第一参数是mysql连接链接标识符，其次是字符串有关更多详细信息，请访问此链接：http://in2.php.net/manual/en/mysqli.real-escape-string.php。

include "db_conx.php"; 
$sql = mysqli_query(pass_your_connection_identifier_here ,"INSERT INTO table(column) VALUES('" . mysqli_real_escape_string(pass_your_connection_identifier_here, $var) . "')"); 
if ($sql) {echo "connection successful"; 
} else { 
echo "failure"; 
} 

Answer 2

你缺少连接标识符都mysqli_real_escape_string()和mysqli_query() 改变你的代码，mysqli_query($connection,$sql)和mysqli_real_escape_string($connection,$string)

Answer 3

你缺少在两个线路连接变量，这就是为什么你所面对的问题：

尝试用此代替您的代码：

//$con // it is your connection variable 
include "db_conx.php"; 
$sql = mysqli_query($con,"INSERT INTO table(column) VALUES('" . mysqli_real_escape_string($con,$var) . "')"); 
if ($sql) {echo "connection successful"; 
} else { 
echo "failure"; 
}