防spl注入添加
<?php
$name = $_POST['name'];
$text = $_POST['text'];
$static = $_POST['static'];
$dbh = new \PDO("mysql:host=127.0.0.1;dbname=my6","root","root");
if (!empty($name)) {
# code...
$sql = "INSERT INTO `article` (`time` ,`text`,`style`)VALUES (:login, :password,:style)";
/* 当调用 prepare() 时，查询语句已经发送给了数据库服务器，此时只有占位符 ? 发送过去，没有用户提交的数据；当调用到 execute()时，用户提交过来的值才会传送给数据库，他们是分开传送的，两者独立的，SQL攻击者没有一点机会。*/
$stmt = $dbh->prepare($sql); $stmt->execute(array(':login'=>$name,':password'=>$text,':style'=>$static));
//返回添加行号
// echo $dbh->lastinsertid();
echo "ok";
}
?>
PDO查询展示数据
<?php
$dbms = 'mysql'; //数据库类型
$host = 'localhost'; //数据库主机名
$dbName = 'my6'; //使用的数据库
$user = 'root'; //数据库连接用户名
$pass = 'root'; //对应的密码
$dsn = "$dbms:host=$host;dbname=$dbName";
$dbh = new PDO($dsn, $user, $pass); //初始化一个PDO对象
$sql = "SELECT * FROM `article`";
$stmt = $dbh->query($sql);
$row = $stmt->fetchAll(PDO::FETCH_ASSOC);
?>
<!doctype html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport"
content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<title>Document</title>
</head>
<body>
<?php foreach ($row as $value):?>
<?php echo $value['id']; ?>
<div>
<a href="day30p.php?aid=<?php echo $value['id']?>"><?php echo $value['time']?></a>
</div>
<?php endforeach; ?>
</body>
</html>
生成静态文件
if判断数据库里面的 style字段是否为1 如是1 则执行静态文件
<?php
$id = $_GET['aid'];
$dbh = new \PDO("mysql:host=127.0.0.1;dbname=my6","root","root");
$sql="select * from article WHERE `id` = :login ";
$stmt = $dbh->prepare($sql);
$stmt->execute(array(':login'=>$id));
$row = $stmt->fetch(PDO::FETCH_ASSOC);
echo $row['style'];
if ($row['style']==1){
// ob_start — 打开输出控制缓冲
ob_start();
// ob_get_contents — 返回输出缓冲区的内容
$file = ob_get_contents();
// fopen — 打开文件或者 URL
$f_file =fopen("article_$id.html","w");
// fwrite — 写入文件（可安全用于二进制文件）
fwrite($f_file,$file);
// fclose — 关闭一个已打开的文件指针
fclose($f_file);
}
?>
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Document</title>
</head>
<body>
<div>
<label>标题</label>
<div>
<?php echo $row['time']?>
</div>
</div>
<div>
<label>内容</label>
<div>
<?php echo $row['text']?>
</div>
</div>
</body>
</html>