php连接数据库之预处理(prepare)
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>prestatement</title>
</head>
<body>
<?
class ConnectSqlite
{
public $db;
public function ConnectSqlite()
{
$this->db=new PDO('sqlite:D:/WWW/jqm/demos/db/serverdatabase');
}
function initStatement($sql)
{
$state=$this->db->prepare($sql);
return $state;
}
}
$connect=new ConnectSqlite;
$state=$connect->initStatement("update users set name=:newname where name=:oldname");
$state->bindParam(":newname", $newname);
$state->bindParam(":oldname", $oldname);
$newname="移动";
$oldname="徐杰";
if($state->execute()){
echo "hi' success updated...";
}else{
echo "fail updated...";
}
$state=$connect->initStatement("select id,loginname,name,password from users where id>:id");
$state->bindColumn(1, $id,PDO::PARAM_INT);
$state->bindColumn(2, $loginname);
$state->bindColumn(3, $name);
$state->bindColumn(4, $password);
$state->execute(array(":id"=>1));
echo '<table border=1 width=900 align="center">';
echo '<tr>';
for($i=0; $i<$state->columnCount(); $i++){
$field=$state->getColumnMeta($i);//获取列名
echo '<th>'.$field["name"]."</th>";
}
$count;
while($state->fetch()){
echo '<tr>';
echo '<td>'.$id.'</td>';
echo '<td>'.$loginname.'</td>';
echo '<td>'.$name.'</td>';
echo '<td>'.$password.'</td>';
echo '</tr>';
$count++;
}
echo '</table>';
echo "总记录数：".$count."<br>";
echo "总字段数：".$state->columnCount()."<br>";
?>
</body>
</html>