PHPmysqli的 预处理执行插入语句

预编译在mysql端

预编译可以自动防止sql注入攻击

 <?php
     //预编译技术
     //1.创建一个mysqli对象
     //2.创建myslqi预编译对象
     $mysqli=new mysqli("localhost", "root", "root", "user1", );
     $mysqli->set_charset("utf8");

     $sql="insert into user1(name,password,email,age) values(?,?,?,?)";

     $mysqli_stmt=$mysqli->prepare($sql) or die($mysqli->error);
     //绑定参数
     $name="小李";
     $password="tsts";
     $email="sohu@sohu.cn";
     $age="";
     //参数绑定  赋值
     $mysqli_stmt->bind_param("sssi", $name,$password,$email,$age);
     //执行
     $result=$mysqli_stmt->execute();
     if(!$result){
         //echo $mysqli->error;
         die($mysqli_stmt->error);
         error_log($result);
     }
     $name="小王";
     $password="";
     $email="sohu2@sohu.cn";
     $age="";
     $mysqli_stmt->bind_param("sssi", $name,$password,$email,$age);
     //执行
     $result=$mysqli_stmt->execute();

     $mysqli->close();

 ?>