使用PHP与LAST_INSERT_ID插入多个表格

Question

下面是我尝试过的代码，但我似乎无法做出正确的调整来让脚本正常运行。

$sql = 'INSERT INTO clients (first_name, last_name, email) VALUES('.$_POST['first_name'].', '.$_POST['last_name'].', '.$_POST['email'].') 
INSERT INTO client_data (client_id, phone, zip, note) VALUES(LAST_INSERT_ID(), '.$_POST['phone'].', '.$_POST['zip'].', '.$_POST['message'].')'; 

mysql_query($sql) or die (mysql_error()); 

任何帮助，非常感谢。

Answer 1

你不能mysql_query();

使用这样执行两个SQL语句：

$sql = 'INSERT INTO clients (first_name, last_name, email) VALUES('.$_POST['first_name'].', '.$_POST['last_name'].', '.$_POST['email'].')'; 
mysql_query($sql); 

$clientId = mysql_insert_id(); 

$sql = 'INSERT INTO client_data (client_id, phone, zip, note) VALUES('.$clientId.', '.$_POST['phone'].', '.$_POST['zip'].', '.$_POST['message'].')'; 

mysql_query($sql) or die (mysql_error()); 

但请阅读了关于SQL注入以及如何预防它们。

Answer 2

你应该把它分解成两个独立的mysql_query调用和使用mysql_insert_id功能：

$firstName = mysql_real_escape_string($_POST["first_name"]); 
$lastName = mysql_real_escape_string($_POST["last_name"]); 
$email = mysql_real_escape_string($_POST["email"]); 
$phone = mysql_real_escape_string($_POST["phone"]); 
$zip = mysql_real_escape_string($_POST["zip"]); 
$message = mysql_real_escape_string($_POST["message"]); 

mysql_query("INSERT INTO clients (first_name, last_name, email) VALUES ('{$firstName}', '{$lastName}', '{$email}')") or die(mysql_error()); 
mysql_query("INSERT INTO client_data (client_id, phone, zip, note) VALUES ('". mysql_insert_id() ."', '{$phone}', '{$zip}', '{$message}')") or die(mysql_error()); 

Answer 3

只是要2个查询：

$sql_insert_clients = "INSERT INTO clients (first_name, last_name, email) VALUES(".$_POST['first_name'].", ".$_POST['last_name'].", ".$_POST['email'].")"; 
mysql_query($sql_insert_clients) or die (mysql_error()); 

$sql_insert_client_data = "INSERT INTO client_data (client_id, phone, zip, note) VALUES(".mysql_insert_id().", ".$_POST['phone'].", ".$_POST['zip'].", ".$_POST['message'].")"; 
mysql_query($sql_insert_client_data) or die (mysql_error()); 

Answer 4

你只是缺少分号分割插入的

$sql = 'INSERT INTO clients (first_name, last_name, email) 
     VALUES('.$_POST['first_name'].', '.$_POST['last_name'].', '.$_POST['email'].')'."; ".' INSERT INTO client_data (client_id, phone, zip, note) VALUES(LAST_INSERT_ID(), '.$_POST['phone'].', '.$_POST['zip'].', '.$_POST['message'].')'; 

mysqli_multi_query($sql) or die (mysql_error()); 

它应该运行的SQL查询（使用dummy co内容）是

INSERT INTO clients (first_name, last_name, email) VALUES('test', 'surname', email); INSERT INTO client_data (client_id, phone, zip, note) VALUES(LAST_INSERT_ID(), 'phone', 'zip', 'message');