Linux C 调用MYSQL API 函数mysql_escape_string()转义插入数据

Title:Linux C 调用MYSQL API 函数mysql_escape_string()转义插入数据 --2013-10-11 11:57

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include "mysql.h"

int main(int argc, char *argv[])
{
    MYSQL my_connection;
    int res;
    mysql_init(&my_connection);
    char UNAMES[50];
    char sql_insert[400];
    char *p[5];
    p[0]="123456";
    p[1]="Fuc'a'k";
    p[2]="127.0.0.1";
    p[3]="2013-09-26 10:10:10";
    p[4]="1";

    /*mysql_real_connect(&mysql,host,user,passwd,dbname,0,NULL,0) == NULL)*/
    if (mysql_real_connect(&my_connection, "127.0.0.1", "root", "FuckFuck","databasename",0,NULL,CLIENT_FOUND_ROWS))
    {
        printf("Connection success\n");
        mysql_escape_string(UNAMES,p[1],strlen(p[1]));
        snprintf(sql_insert, sizeof(sql_insert),"insert into `tablename` (`C1`,`C2`,`C3`,`C4`,`C5`) values ('%s','%s','%s','%s','%s');",p[0],UNAMES,p[2],p[3],p[4]);
        res = mysql_query(&my_connection,sql_insert);

        if (!res)
        {
            printf("Inserted %lu rows\n",(unsigned long)mysql_affected_rows(&my_connection));
            printf("%s------\n",sql_insert);
            printf("%s------\n",UNAMES);
        /*里头的函数返回受表中影响的行数*/
        }
        else
        {
        //分别打印出错误代码及详细信息
        fprintf(stderr, "Insert error %d: %s\n",mysql_errno(&my_connection),mysql_error(&my_connection));
        }
        mysql_close(&my_connection);
    }

    else
    {
        fprintf(stderr, "Connection failed \n");

        if (mysql_errno(&my_connection))
        {
                fprintf(stderr, "Connection error %d: %s\n",mysql_errno(&my_connection),mysql_error(&my_connection));
        }
    }
    return EXIT_SUCCESS;
}