PHP(PDO)论坛开发问题：点击板块仅显示对应topic_id的主题内容

Alright, let's walk through how to get this working. The core issue here is making sure you're passing the correct topic_id from your board listings to the topics page, then using that ID to fetch only matching topics with PDO. Here's a step-by-step breakdown:

1. Update Your Board Links to Include topic_id #

First, when displaying each board in your list, add the topic_id as a GET parameter in the link leading to the topics page. This lets the topics page know which board's content to load. For example:

// Assuming $board is a fetched row from your boards table
echo '<a href="topics.php?topic_id=' . htmlspecialchars($board['topic_id']) . '">' . htmlspecialchars($board['name']) . '</a>';

Using htmlspecialchars() prevents XSS vulnerabilities, so it’s a good habit to keep.

2. Fetch Filtered Topics with PDO #

On your topics.php page, you’ll need to validate the incoming topic_id and use it to query only matching topics. Here’s how to do it safely with prepared statements:

// Initialize your PDO connection (you probably have this already)
$db = new PDO('mysql:host=localhost;dbname=your_forum_db;charset=utf8', 'db_user', 'db_pass');
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

$topics = [];
$selected_topic_id = null;

// Check if topic_id exists and is a valid number
if (isset($_GET['topic_id']) && is_numeric($_GET['topic_id'])) {
    $selected_topic_id = (int)$_GET['topic_id'];
    
    // Prepare a safe query with a parameter
    $stmt = $db->prepare("SELECT * FROM topics WHERE topic_id = :topic_id ORDER BY created_at DESC");
    $stmt->bindParam(':topic_id', $selected_topic_id, PDO::PARAM_INT);
    $stmt->execute();
    
    // Fetch all matching topics
    $topics = $stmt->fetchAll(PDO::FETCH_ASSOC);
}

Key Details: #

• PDO::PARAM_INT ensures the value is treated as an integer, adding extra security.
• Prepared statements eliminate SQL injection risks—never concatenate user input directly into your SQL string!
• Casting $_GET['topic_id'] to an integer filters out any non-numeric garbage.

3. Display the Filtered Topics #

Now loop through the fetched topics to show them, and add a fallback message if no topics exist for the board:

if (!empty($topics)) {
    foreach ($topics as $topic) {
        echo '<div class="topic-card">';
        echo '<h3>' . htmlspecialchars($topic['title']) . '</h3>';
        echo '<p>' . nl2br(htmlspecialchars($topic['content'])) . '</p>';
        echo '<small>Posted on ' . $topic['created_at'] . '</small>';
        echo '</div>';
    }
} else {
    if ($selected_topic_id !== null) {
        echo '<p>No topics found for this board yet—be the first to post!</p>';
    } else {
        echo '<p>Please select a board from the list to view its topics.</p>';
    }
}

4. Double-Check Your Database Structure #

Make sure your topics table has a topic_id column that directly maps to the topic_id (or equivalent) in your boards table. If your boards use a different key name (like board_id), adjust your SQL query to match (e.g., WHERE board_id = :board_id).

Common Mistakes to Avoid: #

• Forgetting to include topic_id in the board link: Inspect your links to confirm they look like topics.php?topic_id=123.
• Typos in column names: Ensure the column name in your SQL matches exactly what’s in your database (case sensitivity matters for some MySQL setups).
• Skipping input validation: Always check that the incoming topic_id is a valid number to avoid errors.

If you’re still stuck, try echoing the $selected_topic_id value and your SQL query to debug—this can help you spot if the parameter isn’t being passed correctly.

内容的提问来源于stack exchange，提问作者maybeiforgotmypassword