我正在尝试将我站点上的textarea中的文本添加到MySQL数据库中.
if (isset($_POST['text']))
{
$text = sanitizeString($_POST['text']);
$text = preg_replace('/\s\s+/',' ',$text);
$query = "SELECT * FROM profiles WHERE user='$user'";
if (MysqL_num_rows(queryMysqL($query)))
{
queryMysqL("UPDATE profiles SET text='$text' where user='$user'");
}
else
{
$query = "INSERT INTO profiles VALUES('$user','$text')";
queryMysqL($query);
}
}
else
{
$query = "SELECT * FROM profiles WHERE user='$user'";
$result = queryMysqL($query);
if (MysqL_num_rows($result))
{
$row = MysqL_fetch_row($result);
$text = stripslashes($row[1]);
}
else $text = "";
}
$text = stripslashes(preg_replace('/\s\s+/',$text));
以下是表单的代码.