在插入SQL之前检查计划是否首先重叠日期

Question

我想先检查我的数据库中是否有两个时间表重叠。如果时间表重叠，它将返回。否则，信息将被插入数据库中。这是我的代码：

 <?php
include("../sql_connect.php");
session_start();
$user_id = $_SESSION['num'];
$event_id = $_GET['id'];
$event_start = $_POST['event_start'];


$query = "SELECT * FROM user WHERE user_id = $user_id";
$data = mysqli_query($sql,$query);
$row = mysqli_fetch_array($data);
$first_name=$row['first_name'];
$last_name=$row['last_name'];


$query1 = "SELECT * FROM event WHERE $event_start >= 'event_start' and $event_start <= 'event_end' ";
$data1 = mysqli_query($sql,$query1);

echo "$query1";

if (!empty($data1)){
    echo "cannot pre reg"
}else {

//check if pre registered
$check_query = "SELECT * FROM record";
$check_data = mysqli_query($sql,$check_query);
$cnt = mysqli_num_rows($check_data);
$check_row = mysqli_fetch_array($check_data);
//echo $cnt;
//loop through records table

    //pre record query
$user_query = "INSERT INTO records VALUES ('',
                                                $event_id,
                                                $user_id,
                                                NOW())";

$user_data = mysqli_query($sql,$user_query);
$select_query = "SELECT * FROM record WHERE user_id = $user_id AND event_id = $event_id";
$select_data = mysqli_query($sql, $select_query);                                                   

$output = array();
while($select_row = mysqli_fetch_assoc($select_data)){
    $output[] = $select_row;
}
}

echo json_encode($output);


}


?>

希望尽快得到反馈！

Answer 1

使用mysqli_num_rows而不是empty

if (mysqli_num_rows($data1) > 0){

Answer 2

这有很多错误。举几个例子。

1. 没有isset()或empty()检查$_POST和$_SESSION变量
2. 使用*而不是单个列
3. 使用相对超过绝对路径
4. 不使用预准备语句，因为您容易受到SQL注入的影响
5. 不是问题，但我建议在程序MySQLi上使用OOP
6. 插入是完全错误的

这就是我所做的，基于我对你的代码的理解。我可能会误解一些部分。

<?php
include $_SERVER['DOCUMENT_ROOT'] . "../sql_connect.php";
session_start();


//Use isset() instead of empty() if you're anticipating falsy values
if(empty($_SESSION['num'])) { 
  exit(json_encode(['status' => 0, 'msg' => 'Session variable is empty']));
}
else if(empty($_GET['id'])) { 
  exit(json_encode(['status' => 0, 'msg' => 'No id given']));
}
else if(empty($_POST['event_start'])) { 
  exit(json_encode(['status' => 0, 'msg' => 'No event start given']));
}
else if(empty($_POST['event_end'])) { 
  exit(json_encode(['status' => 0, 'msg' => 'No event end given']));
}

$user_id = $_SESSION['num'];
$event_id = $_GET['id'];
$event_start = $_POST['event_start'];
$event_start = $_POST['event_end'];

//Select columns individually, instead of * and use prepared statements
$stmt = $mysqli->prepare("SELECT first_name, last_name FROM user WHERE user_id = ?");
$stmt->bind_param("i", $user_id);
$stmt->execute();
$nameArr = $stmt->get_result()->fetch_all(MYSQLI_ASSOC);
if(!$nameArr) exit(json_encode(['status' => 0, 'msg' => 'No rows']));
echo $nameArr['first_name'];
echo $nameArr['last_name'];
$stmt->close();


$stmt = $mysqli->prepare("SELECT COUNT(*) FROM event WHERE event_start <= ? AND event_end >= ?");
$stmt->bind_param("ss", $event_start, $event_start);
$stmt->execute();
$stmt->store_result();
$stmt->bind_result($countPreregister);
$stmt->fetch();
$stmt->close();

if($countPreregister === 0) {
  exit(json_encode(['status' => 0, 'msg' => 'Cannot preregister']));
}

//**No idea what the purpose of this is, as values aren't used again**   

//check if pre registered
//$check_query = "SELECT * FROM record";
//$check_data = mysqli_query($sql,$check_query);
//$cnt = mysqli_num_rows($check_data);
//$check_row = mysqli_fetch_array($check_data);
//echo $cnt;
//loop through records table

//Column names need to be entered. No need for NOW() if your DB already does this
$stmt = $mysqli->prepare("INSERT INTO records (event_id, user_id) VALUES (?, ?)");
$stmt->bind_param("ii", $event_id, $user_id);
$stmt->execute();
$stmt->close();


$stmt = $mysqli->prepare("SELECT * FROM record WHERE user_id = ? AND event_id = ?");
$stmt->bind_param("ii", $user_id, $event_id);
$stmt->execute();
$output = $stmt->get_result()->fetch_all(MYSQLI_ASSOC);
if(!$output) exit(json_encode(['status' => 0, 'msg' => 'No rows']));
$stmt->close();

exit(json_encode(['status' => 1, 'msg' => $output]));