21,886
社区成员
发帖
与我相关
我的任务
分享
session_start();
$userid=$_SESSION['fruserid'];
$price=$_POST['price'];
$currency=$_POST['currency'];
$miaoshu=addslashes($_POST['miaoshu']);
$title=$_POST['biaoti'];
$rank=$_POST['rank'];
$remarks=$_POST['remarks'];
$supplier=$_POST['supplier'];
$imgurl=$_POST['imgurl'];
$txturl=$_POST['txturl'];
$asin=$_POST['asintxt'];
$tdtxt=$imgurl.$txturl;
$sql="INSERT INTO `amazonnew`.`1_find_newpro` (`id`, `img_url`, `title`, `rank`, `price`, `remarks`, `shipments`, `currency`, `asin`, `product_url`,`supplier`,`description`,`user_id`)";
$sql.=" VALUES (NULL, '$imgurl', '$title', '$rank', '$price', '$remarks','0','$currency','$asin','$txturl','$supplier','','$userid')";
$query = mysql_query($sql);
这是写入数据库代码$miaoshu=addslashes($_POST['miaoshu']);这个已经转义了,但还是不行,字段的类型是text