PHP MySQL连接报错：调用未定义方法mysqli::error() 求助

Got it, let's work through this issue together. The error you're seeing—Call to undefined method mysqli::error()—is a straightforward syntax mistake, but we'll also cover some critical best practices to keep your system secure and reliable.

1. 核心错误：错误调用mysqli错误属性 #

Your line 19 has a simple mix-up: mysqli's error is a property, not a method. You're using $mysqli->error() (with parentheses like a function call) when it should be $mysqli->error (no parentheses).

修正后的代码行：

$result = $mysqli->query("SELECT * FROM users WHERE email='$email'") or die($mysqli->error);

为什么本地环境没报错？可能是本地PHP版本的容错性不同，或者你的本地测试场景没触发这条错误分支（比如测试用的邮箱不存在，query()没失败，die()就没执行）。但服务器上触发了查询失败，才暴露了这个语法问题。

2. 紧急修复：解决SQL注入风险 #

Wait a second—your current query directly interpolates the $email variable into the SQL string, which is a huge SQL injection vulnerability. Even if you fix the error call, this code is unsafe for production. Let's rewrite it using prepared statements, which are the correct way to handle user input in SQL:

// 准备预处理语句
$stmt = $mysqli->prepare("SELECT * FROM users WHERE email = ?");
// 绑定参数（s表示字符串类型）
$stmt->bind_param("s", $email);
// 执行查询
$stmt->execute();
// 获取结果
$result = $stmt->get_result();

// 更优雅的错误处理（避免用die()中断程序）
if (!$stmt) {
    die("预处理失败: " . $mysqli->error);
}

This way, user input is never directly inserted into the SQL string, eliminating injection risks entirely.

3. 额外服务器端排查点 #

If you still run into issues after fixing the above, check these common deployment pitfalls:

• mysqli扩展是否启用: Some server configurations disable mysqli by default. You can create a simple phpinfo.php file with <?php phpinfo(); ?> and upload it to your server to verify if mysqli is listed in the output.
• 数据库连接参数: Double-check that your server's database host, username, password, and database name match what your hosting provider gave you—these are almost always different from your local XAMPP setup.
• PHP版本兼容性: Ensure your server's PHP version supports mysqli (modern versions all do, but older servers might still rely on the deprecated mysql_* functions).

内容的提问来源于stack exchange，提问作者Ethan Saunders