关于PHP,有2个疑问,前辈们请进

心狱

1. if ($_GET['id']!="") {
   
2. $str="select * from news where id='".$_GET['id']."';";
   
3. //数据查询(也可能是UPDATE或者DELETE)
   
4. }

复制代码

以上,需要不需要过滤这个ID的GET?


第二问

1. $str="SELECT * FROM news order by id desc";
   
2. $result=$sql->query($str);
   
3. $news=@mysql_fetch_object($result);
   
4. $record=@mysql_num_rows($result);
   
5. 
   
6. 
   
7. $fp = fopen ("model.html","r");
   
8. $content = fread ($fp,filesize ("model.html"));
   
9. $content = str_replace ("{id}",$news->id,$content);
   
10. 
    
11. 
    
12. 
    
13. $filename = "name.html";
    
14. $handle = fopen ($filename,"w");
    
15. 
    
16. 
    
17. fclose ($handle);

复制代码

如何把上面的这段循环成生成列表的HTML?就是对应一个ID一个标题,这样循环生成的HTML页

心狱

心狱