PHP SQL插入数据仅显示语句无详细错误提示求助

Hey there! I totally get how frustrating it is when you only see an error message that just spits out your SQL query without any details—especially when you're still learning PHP and SQL. Let's break this down step by step to fix both the error reporting issue and get you using prepared statements properly.

1. First, Get Detailed Error Messages #

Right now, your code is probably just echoing the query when something goes wrong, but not grabbing the actual database error. Let's fix that so you know why the insert is failing.

If you're using MySQLi (the most common extension for PHP + MySQL), here's how to capture errors:

For basic (non-prepared) queries (temporarily, to debug): #

// After your connection code from connection.php
$query = "INSERT INTO users (username, password) VALUES ('fff', '$2y$10$YUd1AErIj4RGRnjkFkYlkOn.s9OV62sq8.HVGO2jeE8dSthpgp6ey')";
$result = mysqli_query($conn, $query);

if (!$result) {
    // This will give you the actual error from MySQL
    die("Error: " . mysqli_error($conn) . "<br>Query: " . $query);
}

Important Note: #

• Make sure $conn matches the connection variable in your connection.php file
• Never show full error messages in a live/production environment—this is only for debugging!

2. Switch to Prepared Statements (The Safe, Proper Way) #

You mentioned you know you should use prepared statements—great call! They prevent SQL injection and make your code more robust. Here's a complete, working example using MySQLi prepared statements:

// Include your database connection file
require 'connection.php';

// First, confirm the connection is valid
if (!$conn) {
    die("Connection failed: " . mysqli_connect_error());
}

// Prepare the statement (use ? as placeholders for dynamic values)
$stmt = mysqli_prepare($conn, "INSERT INTO users (username, password) VALUES (?, ?)");

// Bind parameters: "ss" means two string values (username = string, password hash = string)
mysqli_stmt_bind_param($stmt, "ss", $username, $passwordHash);

// Set your values
$username = 'fff';
$passwordHash = '$2y$10$YUd1AErIj4RGRnjkFkYlkOn.s9OV62sq8.HVGO2jeE8dSthpgp6ey';

// Execute the statement
if (mysqli_stmt_execute($stmt)) {
    echo "New record created successfully!";
} else {
    // Get the specific error from the prepared statement
    echo "Error: " . mysqli_stmt_error($stmt);
}

// Clean up resources
mysqli_stmt_close($stmt);
mysqli_close($conn);

3. Quick Checks for Your connection.php #

Make sure your connection file isn't hiding silent failures:

• Verify you're using mysqli_connect() (avoid the old, deprecated mysql_* functions)
• Add connection error checking directly in connection.php:

$servername = "your_server";
$dbusername = "your_db_user";
$dbpassword = "your_db_pass";
$dbname = "your_db_name";

$conn = mysqli_connect($servername, $dbusername, $dbpassword, $dbname);

// Check if connection worked
if (!$conn) {
    die("Connection failed: " . mysqli_connect_error());
}

Once you add the detailed error reporting, you'll be able to see exactly what's wrong—like a missing column, incorrect data type, or database permission issue. Then the prepared statement code will keep your application secure once you resolve the initial error.

内容的提问来源于stack exchange，提问作者Ezrab_