调用未定义的方法 PDO::execute()

时间:2023-04-07
本文介绍了调用未定义的方法 PDO::execute()的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着跟版网的小编来一起学习吧!

问题描述

我正在尝试对页面登录进行编码,但我被这个错误阻止了

i'm trying to code a page login but i was stopper at this error

请告诉我这里的错误

<?php
@session_start();
include("../../connexion/connexion.php");
class login_class {
        public $user;
        public $password;
        public $connexion;
    public function check_login() {
        try {
            $cn = new class_connect();
            $this->connexion = $cn->connect(null);
            $result = $this->connexion->execute("select * from user where username='$this->user' and password='$this->password'");

                        $data = $result->fetchAll(PDO::FETCH_OBJ);


            if (!empty($data[0]->id_user)) {
                return true;
            }else {
                return false;
            }
        }catch(PDOException $ex) {  
            echo $ex->getMessage();
        }
    }
    public function __construct($user) {
        if($user){
            $this->user = $user["username"];
            $this->password = $user["password"];
        }
    }

}
?>

推荐答案

->execute() 用于准备好的语句.例如

->execute() is for prepared statements. e.g.

$stmt = $dbh->prepare('some query here');
$stmt->execute();

您正在尝试直接在主数据库对象上执行查询.对于 PDO,这意味着

You're trying to execute a query directly on the main DB object. For PDO, that means

 $dbh->exec('query goes here');

您真的应该查看准备好的语句.您很容易受到SQL 注入攻击的影响,而且由于您一开始使用的是 PDO,因此基本上是不可原谅的不要编写安全的查询.

You really should look into prepared statements. You're vulnerable to SQL injection attacks as is, and since you're using PDO to begin with, it's basically unforgivable to NOT be writing safe queries.

这篇关于调用未定义的方法 PDO::execute()的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持跟版网!

上一篇:PDO 返回不正确但重复的数据.密钥不在数据库中. 下一篇:如何让 php 与 postgresql 一起工作?

相关文章