PHPmysqli的 预处理执行插入语句

预编译在mysql端

预编译可以自动防止sql注入攻击

<?php
    //预编译技术
    //1.创建一个mysqli对象
    //2.创建myslqi预编译对象
    $mysqli=new mysqli("localhost", "root", "root", "user1", 3306);
    $mysqli->set_charset("utf8");

    $sql="insert into user1(name,password,email,age) values(?,?,?,?)";
    
    $mysqli_stmt=$mysqli->prepare($sql) or die($mysqli->error);
    //绑定参数
    $name="小李";
    $password="tsts";
    $email="sohu@sohu.cn";
    $age="200";
    //参数绑定  赋值
    $mysqli_stmt->bind_param("sssi", $name,$password,$email,$age);
    //执行
    $result=$mysqli_stmt->execute();
    if(!$result){
        //echo $mysqli->error;
        die($mysqli_stmt->error);
        error_log($result);
    }
    $name="小王";
    $password="5678";
    $email="sohu2@sohu.cn";
    $age="20";
    $mysqli_stmt->bind_param("sssi", $name,$password,$email,$age);
    //执行
    $result=$mysqli_stmt->execute();

    $mysqli->close();

?>