数据库转义php函数

<?php
$servername = "localhost";
$username = "username";
$password = "password";
$dbname = "myDB";

// 创建连接
$conn = new mysqli($servername, $username, $password, $dbname);

// 检查连接
if ($conn->connect_error) {
    die("连接失败: " . $conn->connect_error);
}

// 用户输入
$userInput = "O'Reilly";

// 转义处理
$escapedInput = mysqli_real_escape_string($conn, $userInput);

// 构建SQL查询语句
$sql = "SELECT * FROM books WHERE author = '$escapedInput'";

// 执行查询
$result = $conn->query($sql);

// 处理结果
if ($result->num_rows > 0) {
    while($row = $result->fetch_assoc()) {
        echo "书名: " . $row["title"]. " - 作者: " . $row["author"]. "<br>";
    }
} else {
    echo "0 结果";
}

// 关闭连接
$conn->close();
?>

<?php
$servername = "localhost";
$username = "username";
$password = "password";
$dbname = "myDB";

try {
    // 创建PDO连接
    $conn = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password);
    $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

    // 用户输入
    $userInput = "O'Reilly";

    // 转义处理
    $escapedInput = $conn->quote($userInput);

    // 构建SQL查询语句
    $sql = "SELECT * FROM books WHERE author = $escapedInput";

    // 执行查询
    $stmt = $conn->query($sql);

    // 处理结果
    while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
        echo "书名: " . $row["title"]. " - 作者: " . $row["author"]. "<br>";
    }
} catch(PDOException $e) {
    echo "连接失败: " . $e->getMessage();
}

// 关闭连接
$conn = null;
?>