HTML表单数据到MySQL的正确插入方法：处理多选框与常见问题解析

<div class="form-control">
    <label>
    4. Physical Side Effects Reported
    <small>(Check all that apply)</small>
    </label>
    <!-- Input Type Checkbox -->
    <label for="inp-1">
        <input type="checkbox"
               name="physSymptoms[]" value="Pain">Pain</input>
    </label>
    <label for="inp-2">
        <input type="checkbox"
               name="physSymptoms[]" value="Swelling">Swelling</input>
    </label>
    <label for="inp-3">
        <input type="checkbox"
               name="physSymptoms[]" value="Redness">Redness</input>
    </label>
    <label for="inp-4">
        <input type="checkbox"
               name="physSymptoms[]" value="Rash">Rash</input>
    </label>
    <label for="inp-5">
        <input type="checkbox"
               name="physSymptoms[]" value="None">None</input>
    </label>
</div>
<div class="form-control">
    <label>
        5. Illness Side Effects Reported
        <small>(Check all that apply)</small>
    </label>
    <!--Input Type Checkbox -->
    <label for="inp-1">
        <input type="checkbox"
               name="illSymptoms[]" value="Headache">Headache</input>
    </label>
    <label for="inp-2">
        <input type="checkbox"
               name="illSymptoms[]" value="Chills">Chills</input>
    </label>
    <!-- ... 其他疾病症状多选框 ... -->
    <label for="inp-8">
        <input type="checkbox"
               name="illSymptoms[]" value="None">None</input>
    </label>
</div>

<?php

    // 数据库连接信息
    $servername = "localhost";
    $username = "root";
    $password = "";
    $dbname = "csurv";

    // 创建连接
    $conn = new mysqli($servername, $username, $password, $dbname);

    // 检查连接
    if ($conn->connect_error) {
        die("ERROR: Could not connect. " . $conn->connect_error);
    }

    // 获取单选框和下拉菜单的值
    $answer = $_POST['answer'] ?? ''; // 使用null合并运算符防止未定义索引错误
    $agegroup = $_POST['agegroup'] ?? '';
    $vaccines = $_POST['vaccines'] ?? '';

    // 处理多选框数据
    // 检查$_POST['physSymptoms']是否存在且是数组
    if (isset($_POST['physSymptoms']) && is_array($_POST['physSymptoms'])) {
        $physSymptoms = implode(", ", $_POST['physSymptoms']); // 使用逗号和空格作为分隔符
    } else {
        $physSymptoms = ""; // 如果没有选择任何物理症状，则为空字符串
    }

    // 检查$_POST['illSymptoms']是否存在且是数组
    if (isset($_POST['illSymptoms']) && is_array($_POST['illSymptoms'])) {
        $illSymptoms = implode(", ", $_POST['illSymptoms']); // 使用逗号和空格作为分隔符
    } else {
        $illSymptoms = ""; // 如果没有选择任何疾病症状，则为空字符串
    }

    // 准备SQL INSERT 语句
    // 注意：这里的SQL语句仍然存在SQL注入风险，请参考后续的安全建议
    $sql = "INSERT INTO submisiion (qualified, agegroup, vaccinetype, physsymptoms, illsymptoms)
            VALUES('$answer', '$agegroup', '$vaccines', '$physSymptoms', '$illSymptoms')";

    // 执行查询
    if (mysqli_query($conn, $sql)) {
        echo "<h3>数据已成功存储到数据库。请浏览您的phpMyAdmin查看更新数据。</h3>";
        echo nl2br("\n疫苗接种状态: $answer\n 年龄组: $agegroup\n 疫苗类型: $vaccines\n 身体症状: $physSymptoms\n 疾病症状: $illSymptoms");
    } else {
        echo "ERROR: 抱歉，SQL语句执行失败: $sql. " . mysqli_error($conn);
    }

    // 关闭连接
    mysqli_close($conn);

?>

CREATE TABLE submisiion (
    id INT AUTO_INCREMENT PRIMARY KEY,
    qualified VARCHAR(10) NOT NULL,
    agegroup VARCHAR(20) NOT NULL,
    vaccinetype VARCHAR(50) NOT NULL,
    physsymptoms TEXT, -- 存储合并后的物理症状
    illsymptoms TEXT,   -- 存储合并后的疾病症状
    submission_time TIMESTAMP DEFAULT CURRENT_TIMESTAMP
);

<?php
    // ... 数据库连接代码 ...

    echo "<pre>"; // 格式化输出
    var_dump($_POST);
    echo "</pre>";

    // ... 后续代码 ...
?>

// ... 数据库连接代码 ...

// 获取并处理数据 (与之前相同)
$answer = $_POST['answer'] ?? '';
$agegroup = $_POST['agegroup'] ?? '';
$vaccines = $_POST['vaccines'] ?? '';
$physSymptoms = isset($_POST['physSymptoms']) && is_array($_POST['physSymptoms']) ? implode(", ", $_POST['physSymptoms']) : "";
$illSymptoms = isset($_POST['illSymptoms']) && is_array($_POST['illSymptoms']) ? implode(", ", $_POST['illSymptoms']) : "";

// 准备预处理语句
$stmt = $conn->prepare("INSERT INTO submisiion (qualified, agegroup, vaccinetype, physsymptoms, illsymptoms) VALUES (?, ?, ?, ?, ?)");

// 检查准备是否成功
if ($stmt === false) {
    die("ERROR: 准备语句失败: " . $conn->error);
}

// 绑定参数 (s代表string类型)
$stmt->bind_param("sssss", $answer, $agegroup, $vaccines, $physSymptoms, $illSymptoms);

// 执行语句
if ($stmt->execute()) {
    echo "<h3>数据已成功存储到数据库。</h3>";
    echo nl2br("\n疫苗接种状态: $answer\n 年龄组: $agegroup\n 疫苗类型: $vaccines\n 身体症状: $physSymptoms\n 疾病症状: $illSymptoms");
} else {
    echo "ERROR: 抱歉，数据插入失败: " . $stmt->error;
}

// 关闭语句和连接
$stmt->close();
$conn->close();