使用 AJAX 传递数据到 PHP 上传脚本的正确方法

var id = "<?php echo $id ?>"; // 从 PHP 传递过来的 ID var form_data = new FormData(); form_data.append("id", id); // 将 ID 添加到 FormData var files = $('#multiple_files')[0].files;  // 检查文件数量 if (files.length > 15) {     alert('You can not select more than 15 files');     return; // 停止上传 }  // 将文件添加到 FormData for (var i = 0; i < files.length; i++) {     form_data.append("multiple_files[]", files[i]); // 允许上传多个文件 }

$.ajax({     url: "upload.php",     data: form_data,     method: "POST",     contentType: false,     cache: false,     processData: false,     beforeSend: function() {         $('#Error_multiple_files').html('<br /><label class="text-primary">Uploading...</label>');     },     success: function(data) {         $('#error_multiple_files').html('<br /><label class="text-success">Uploaded</label>');         load_image_data();     },     error: function(jqXHR, textStatus, errorThrown) {         console.error("AJAX Error:", textStatus, errorThrown);         $('#error_multiple_files').html('<br /><label class="text-danger">Upload Failed</label>');     } });

AI Undetect

让AI无法察觉，让文字更人性化，为文字体验创造无限可能。

70

查看详情

<?php  $id = $_POST['id']; $files = $_FILES['multiple_files'];  // 检查是否有文件上传 if (isset($files) && is_array($files['name'])) {     // 循环处理每个上传的文件     for ($i = 0; $i < count($files['name']); $i++) {         $file_name = $files['name'][$i];         $file_tmp = $files['tmp_name'][$i];         $file_error = $files['error'][$i];          // 检查上传是否出错         if ($file_error === UPLOAD_ERR_OK) {             // 移动文件到指定目录             $destination = 'uploads/' . $file_name; // 确保 uploads 目录存在             if (move_uploaded_file($file_tmp, $destination)) {                 // 文件上传成功，执行数据库操作                 // **重要：使用预处理语句防止 SQL 注入**                 $servername = "localhost";                 $username = "username";                 $password = "password";                 $dbname = "myDB";                  // 创建连接                 $conn = new mysqli($servername, $username, $password, $dbname);                  // 检测连接                 if ($conn->connect_error) {                     die("连接失败: " . $conn->connect_error);                 }                  // 使用预处理语句                 $sql = "INSERT INTO tbl_image (postid, image_name, image_description) VALUES (?, ?, '')";                 $stmt = $conn->prepare($sql);                 $stmt->bind_param("ss", $id, $file_name);                  if ($stmt->execute() === TRUE) {                     echo "新记录插入成功";                 } else {                     echo "Error: " . $sql . "<br>" . $conn->error;                 }                  $stmt->close();                 $conn->close();             } else {                 echo "文件移动失败";             }         } else {             echo "文件上传出错: " . $file_error;         }     } } else {     echo "没有文件上传"; }  ?>

// 使用预处理语句 $sql = "INSERT INTO tbl_image (postid, image_name, image_description) VALUES (?, ?, '')"; $stmt = $conn->prepare($sql); $stmt->bind_param("ss", $id, $file_name); // "ss" 表示两个字符串类型参数  if ($stmt->execute() === TRUE) {     echo "新记录插入成功"; } else {     echo "Error: " . $sql . "<br>" . $conn->error; }  $stmt->close(); $conn->close();