0

我的网站仅在创建帐户后才提供服务和访问权限，这仅在付款完成后才会发生。

我遇到的问题是下面的 mySQL 语句。我知道语句本身没有任何“破坏交易”的错误，因为如果我设置$usr_name = 'bob' 例如而不是会话变量（这是我需要的），它会被添加到数据库中，使用相同的确切 mySQL 没有问题询问。当我尝试将变量设置为下面的会话变量时，问题就出现了。当我这样做时，一个空白行被添加到数据库中。

您会认为会话变量不包含任何内容，这将是对我的问题的合乎逻辑的解释，但是，下面的代码中的 echo 从会话变量中获取其值会按应有的方式打印出所有内容，因此会话变量是正确设置。

我还想补充一点，代码大部分是正确编写的，并且在付款完成后会到达最里面的 if 语句，这是应该的。

另外，尝试将 or 添加die(mysql_error())到我的查询中，并且没有打印出错误。

如果有人能建议我可以做些什么来尝试解决这个问题，我将不胜感激。

<?php

    session_start();
    //Create mysql connect variable
    $conn = mysql_connect('myhostedresource.com', 'user', 'password');

    //kill connection if error occurs
    if(!$conn){
        die('Error: Unable to connect.' . '<br>' . mysql_error());
    }

    //connect to mysql database
    mysql_select_db("stevenash", $conn);

    // PHP 4.1
    // read the post from PayPal system and add 'cmd'
    $req = 'cmd=_notify-validate';

    foreach ($_POST as $key => $value) {
        $value = urlencode(stripslashes($value));
        $req .= "&$key=$value";
    }

    // post back to PayPal system to validate
    $header .= "POST /cgi-bin/webscr HTTP/1.0\r\n";
    $header .= "Content-Type: application/x-www-form-urlencoded\r\n";
    $header .= "Content-Length: " . strlen($req) . "\r\n\r\n";
    $fp = fsockopen ('ssl://www.paypal.com', 443, $errno, $errstr, 30);

    // assign posted variables to local variables
    $item_name = $_POST['item_name'];
    $item_number = $_POST['item_number'];
    $payment_status = $_POST['payment_status'];
    $payment_amount = $_POST['mc_gross'];
    $payment_currency = $_POST['mc_currency'];
    $txn_id = $_POST['txn_id'];
    $receiver_email = $_POST['receiver_email'];
    $payer_email = $_POST['payer_email'];       


    $usr_email = mysql_real_escape_string($_SESSION['email']);
    $usr_compname = mysql_real_escape_string($_SESSION['compname']);
    $usr_city = mysql_real_escape_string($_SESSION['city']);
    $usr_state = mysql_real_escape_string($_SESSION['state']);
    $usr_phone = mysql_real_escape_string($_SESSION['phone']);
    $usr_password = mysql_real_escape_string($_SESSION['password']);
    $usr_first = mysql_real_escape_string($_SESSION['first']);
    $usr_last = mysql_real_escape_string($_SESSION['last']);


    $_SESSION['email'];

    if (!$fp) {
        // HTTP ERROR
    }else{
        fputs ($fp, $header . $req);
        while (!feof($fp)) {
            $res = fgets ($fp, 1024);
            if (strcmp ($res, "VERIFIED") == 0) {
                // check the payment_status is Completed
                if($payment_status == 'Completed'){
                    $txn_id_check = mysql_query("SELECT txn_id FROM log WHERE txn_id='$txn_id'");
                    //add user to database
                    if(mysql_num_rows($txn_id_check) != 1){ //payment has not been processed yet
                        //continue processing
                        if($receiver_email=='matthayzon89@gmail.com'){
                            if($payment_amount=='1.00' && $payment_currency=='USD'){
                                //add transaction id to db
                                mysql_query("INSERT INTO log (`log_id`, `txn_id`, `email`) VALUES('','$txn_id','$payer_email')", $conn);            

                                $myString = "INSERT users (`email`, `compname`, `city`, `state`, `phone`, `password`, `first`, `last`) 
                                            VALUES('".$usr_email."','".$usr_compname."','".$usr_city."','".$usr_state."','".$usr_phone."','".$usr_password."','".$usr_first."','".$usr_last."')";
                                echo $myString;     

                                mysql_query($myString,$conn);
                            }
                        }
                    }
                }
                // check that txn_id has not been previously processed
                // check that receiver_email is your Primary PayPal email
                // check that payment_amount/payment_currency are correct
                // process payment
            }
            else if (strcmp ($res, "INVALID") == 0) {
                // log for manual investigation
            }
        }
        fclose ($fp);
    }
?>
4

2 回答 2

0

我相信id第二个查询是AUTO_INCREMENT. 只要AUTO_INCREMENT有字段，就不要在查询中使用它们。另外，您将其设置''为不正确的。

您的查询应该是。

 mysql_query("
            INSERT INTO users 
            (`email`, `compname`, `city`, `state`, `phone`, `password`, `first`, `last`)
            VALUES(
           '$usr_email','$usr_compname','$usr_city','$usr_state',$usr_phone,
            '$usr_password','$usr_first','hello')",$conn);

编辑 1

$usr_phone也不应该在引号中，因为电话号码是整数值...

于 2012-07-05T22:47:03.150 回答
0 
mysql_query("INSERT INTO log (log_id, txn_id, email) VALUES('','$txn_id','$payer_email')", $conn);
mysql_query("INSERT INTO users (`id`, `email`, `compname`, `city`, `state`, `phone`, `password`, `first`, `last`)
             VALUES('', '$usr_email','$usr_compname','$usr_city','$usr_state','$usr_phone','$usr_password','$usr_first','hello')",$conn);

在运行它之前尝试打印出你的 SQL，看看它在做什么：

$logSql = "INSERT INTO log (log_id, txn_id, email) VALUES('','$txn_id','$payer_email')";
echo $logSql;
// mysql_query($logSql, $conn);

$insertSql = "INSERT INTO users (`id`, `email`, `compname`, `city`, `state`, `phone`, `password`, `first`, `last`)
              VALUES('', '$usr_email','$usr_compname','$usr_city','$usr_state','$usr_phone','$usr_password','$usr_first','hello')";
echo $insertSql;
// mysql_query($insertSql, $conn);

找出问题所在，并继续向后工作（添加echo语句），直到找到问题的根源。

于 2012-07-05T22:55:23.177 回答