php评论功能实现
实现PHP评论功能的基本步骤
创建一个简单的PHP评论功能需要结合前端表单和后端数据处理。以下是一个基础实现方案：
数据库表设计
评论功能通常需要一张数据库表存储评论数据，基本字段可包括：
CREATE TABLE comments (
id INT AUTO_INCREMENT PRIMARY KEY,
name VARCHAR(100) NOT NULL,
email VARCHAR(100),
content TEXT NOT NULL,
created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
post_id INT NOT NULL
);前端表单
创建HTML表单让用户提交评论：
<form action="post_comment.php" method="post">
<input type="text" name="name" placeholder="Your Name" required>
<input type="email" name="email" placeholder="Your Email">
<textarea name="content" placeholder="Your Comment" required></textarea>
<input type="hidden" name="post_id" value="<?php echo $post_id; ?>">
<button type="submit">Submit Comment</button>
</form>处理评论提交
创建post_comment.php处理表单提交：
<?php
// 连接数据库
$conn = new mysqli('localhost', 'username', 'password', 'database');
// 获取表单数据
$name = $_POST['name'];
$email = $_POST['email'];
$content = $_POST['content'];
$post_id = $_POST['post_id'];
// 防止SQL注入
$stmt = $conn->prepare("INSERT INTO comments (name, email, content, post_id) VALUES (?, ?, ?, ?)");
$stmt->bind_param("sssi", $name, $email, $content, $post_id);
$stmt->execute();
$stmt->close();
// 重定向回原页面
header("Location: ".$_SERVER['HTTP_REFERER']);
exit();
?>显示评论
在页面中显示已有评论：
<?php
$conn = new mysqli('localhost', 'username', 'password', 'database');
$post_id = 1; // 替换为实际文章ID
$result = $conn->query("SELECT * FROM comments WHERE post_id = $post_id ORDER BY created_at DESC");
while($row = $result->fetch_assoc()) {
echo '<div class="comment">';
echo '<h4>'.$row['name'].'</h4>';
echo '<small>'.date('Y-m-d H:i', strtotime($row['created_at'])).'</small>';
echo '<p>'.$row['content'].'</p>';
echo '</div>';
}
$conn->close();
?>安全增强措施
添加数据验证和过滤：
$name = filter_var($_POST['name'], FILTER_SANITIZE_STRING);
$email = filter_var($_POST['email'], FILTER_SANITIZE_EMAIL);
$content = filter_var($_POST['content'], FILTER_SANITIZE_STRING);防止XSS攻击：
echo htmlspecialchars($row['content'], ENT_QUOTES, 'UTF-8');扩展功能建议
实现分页显示评论：
$per_page = 5;
$page = isset($_GET['page']) ? (int)$_GET['page'] : 1;
$start = ($page - 1) * $per_page;
$result = $conn->query("SELECT * FROM comments WHERE post_id = $post_id ORDER BY created_at DESC LIMIT $start, $per_page");添加回复功能可在数据库中添加parent_id字段：
ALTER TABLE comments ADD COLUMN parent_id INT DEFAULT NULL;性能优化
为post_id和parent_id字段添加索引：
CREATE INDEX idx_post_id ON comments(post_id);
CREATE INDEX idx_parent_id ON comments(parent_id);使用预处理语句防止SQL注入，如示例代码所示。
