MySQLI多语言表单插入不同数据表及表单状态保持求助

Hey there! Let's break down your problem step by step—you're dealing with two main issues here: keeping form state after submission and inserting data into the right table based on language selection. Since you're new to this, I'll keep things clear and actionable.

When you submit a form, the page reloads by default, which clears all inputs unless you explicitly repopulate them. Here's how to fix this:

For Text Input Fields #

In your HTML input tags, set the value attribute to the submitted value from your backend. Using PHP as an example (adjust syntax for your backend language if needed):

<input type="text" name="article_title" value="<?php echo isset($_POST['article_title']) ? htmlspecialchars($_POST['article_title']) : ''; ?>">
<input type="textarea" name="article_content"><?php echo isset($_POST['article_content']) ? htmlspecialchars($_POST['article_content']) : ''; ?></textarea>

• isset($_POST['field_name']) checks if the form was submitted and the field has a value.
• htmlspecialchars() prevents XSS attacks and ensures special characters (like quotes) display correctly.

For Language Dropdown #

Add the selected attribute to the option that matches the submitted language. Again, PHP example:

<select name="language">
  <option value="en" <?php echo (isset($_POST['language']) && $_POST['language'] == 'en') ? 'selected' : ''; ?>>English</option>
  <option value="ro" <?php echo (isset($_POST['language']) && $_POST['language'] == 'ro') ? 'selected' : ''; ?>>Romanian</option>
</select>

This checks if a language was submitted and matches the option's value, then marks it as selected after the page reloads.

Next, you need to route form data to either article_en or articles_ro based on the selected language. The key here is to validate user input to avoid security risks like SQL injection. Here's a secure way to do this with PHP/mysqli:

First, validate and map the language to the correct table:

// Get submitted language, default to 'en' if not set
$selected_lang = isset($_POST['language']) ? $_POST['language'] : 'en';

// Whitelist allowed languages to prevent invalid table names (critical for security!)
$allowed_langs = ['en', 'ro'];
if (!in_array($selected_lang, $allowed_langs)) {
  die("Invalid language selection. Please choose English or Romanian.");
}

// Map language to table name
$target_table = ($selected_lang == 'en') ? 'article_en' : 'articles_ro';

Then, use a prepared statement to safely insert the data:

// Assume you've already established a database connection
$conn = new mysqli('localhost', 'your_username', 'your_password', 'your_db_name');

// Check connection
if ($conn->connect_error) {
  die("Connection failed: " . $conn->connect_error);
}

// Prepare the INSERT statement (prepared statements prevent SQL injection)
$stmt = $conn->prepare("INSERT INTO $target_table (title, content) VALUES (?, ?)");
$stmt->bind_param("ss", $title, $content); // 'ss' means two string parameters

// Get sanitized form values
$title = htmlspecialchars($_POST['article_title']);
$content = htmlspecialchars($_POST['article_content']);

// Execute the insertion
$stmt->execute();

// Clean up connections
$stmt->close();
$conn->close();

• Whitelisting languages ensures only valid table names are used—never directly use user input to build table names without validation.
• Prepared statements separate SQL logic from user input, making your code safe from injection attacks.

• Test one thing at a time: First get the form state retention working (submit the form and check if inputs stay filled), then test the table insertion.
• If you're using a different backend (like Python/Flask, Node.js/Express), the logic is the same—just adjust the syntax. For example, in Flask, you'd use request.form.get() to fetch values and Jinja templating to set selected or value attributes.
• Always sanitize user input: This prevents both security issues and display glitches with special characters.

内容的提问来源于stack exchange，提问作者Agnes Pandek