如何利用PHP开发在线商城功能

-- 创建商品表
CREATE TABLE products (
    id INT AUTO_INCREMENT PRIMARY KEY,
    name VARCHAR(255) NOT NULL,
    price DECIMAL(10, 2) NOT NULL,
    description TEXT
);

-- 创建订单表
CREATE TABLE orders (
    id INT AUTO_INCREMENT PRIMARY KEY,
    user_id INT NOT NULL,
    amount DECIMAL(10, 2) NOT NULL,
    status ENUM('待支付', '已支付', '已取消') NOT NULL DEFAULT '待支付',
    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
    FOREIGN KEY (user_id) REFERENCES users(id)
);

-- 创建用户表
CREATE TABLE users (
    id INT AUTO_INCREMENT PRIMARY KEY,
    name VARCHAR(255) NOT NULL,
    email VARCHAR(255) NOT NULL,
    password VARCHAR(255) NOT NULL
);

<?php
// 获取商品列表
function getProducts() {
    $conn = connectToDatabase();
    $sql = "SELECT * FROM products";
    $result = $conn->query($sql);

    if ($result->num_rows > 0) {
        $products = array();
        while($row = $result->fetch_assoc()) {
            $products[] = $row;
        }
        return $products;
    } else {
        return array();
    }
}

// 添加商品
function addProduct($name, $price, $description) {
    $conn = connectToDatabase();
    $name = mysqli_real_escape_string($conn, $name);
    $price = mysqli_real_escape_string($conn, $price);
    $description = mysqli_real_escape_string($conn, $description);

    $sql = "INSERT INTO products (name, price, description) VALUES ('$name', '$price', '$description')";
    $result = $conn->query($sql);

    return $result;
}

// 编辑商品
function editProduct($id, $name, $price, $description) {
    $conn = connectToDatabase();
    $name = mysqli_real_escape_string($conn, $name);
    $price = mysqli_real_escape_string($conn, $price);
    $description = mysqli_real_escape_string($conn, $description);

    $sql = "UPDATE products SET name='$name', price='$price', description='$description' WHERE id=$id";
    $result = $conn->query($sql);

    return $result;
}

// 删除商品
function deleteProduct($id) {
    $conn = connectToDatabase();
    $sql = "DELETE FROM products WHERE id=$id";
    $result = $conn->query($sql);

    return $result;
}
?>

<?php
// 创建订单
function createOrder($user_id, $amount) {
    $conn = connectToDatabase();
    $user_id = mysqli_real_escape_string($conn, $user_id);
    $amount = mysqli_real_escape_string($conn, $amount);

    $sql = "INSERT INTO orders (user_id, amount) VALUES ('$user_id', '$amount')";
    $result = $conn->query($sql);

    return $result;
}

// 查看订单
function getOrder($id) {
    $conn = connectToDatabase();
    $sql = "SELECT * FROM orders WHERE id=$id";
    $result = $conn->query($sql);

    if ($result->num_rows > 0) {
        return $result->fetch_assoc();
    } else {
        return false;
    }
}

// 支付订单
function payOrder($id) {
    $conn = connectToDatabase();
    $sql = "UPDATE orders SET status='已支付' WHERE id=$id";
    $result = $conn->query($sql);

    return $result;
}

// 取消订单
function cancelOrder($id) {
    $conn = connectToDatabase();
    $sql = "UPDATE orders SET status='已取消' WHERE id=$id";
    $result = $conn->query($sql);

    return $result;
}
?>

<?php
// 用户注册
function registerUser($name, $email, $password) {
    $conn = connectToDatabase();
    $name = mysqli_real_escape_string($conn, $name);
    $email = mysqli_real_escape_string($conn, $email);
    $password = mysqli_real_escape_string($conn, $password);

    // 这里可以进行密码加密操作，例如：$password = md5($password);

    $sql = "INSERT INTO users (name, email, password) VALUES ('$name', '$email', '$password')";
    $result = $conn->query($sql);

    return $result;
}

// 用户登录
function loginUser($email, $password) {
    $conn = connectToDatabase();
    $email = mysqli_real_escape_string($conn, $email);
    $password = mysqli_real_escape_string($conn, $password);

    // 这里可以进行密码解密操作，例如：$password = md5($password);

    $sql = "SELECT * FROM users WHERE email='$email' AND password='$password'";
    $result = $conn->query($sql);

    if ($result->num_rows > 0) {
        return $result->fetch_assoc();
    } else {
        return false;
    }
}

// 退出登录
function logoutUser() {
    // 清除用户登录状态，例如：unset($_SESSION['user']);
}
?>