Соединение mysqli_query для уже подключенной страницы PHP

Пользователь уже зарегистрирован на защищенной странице для панели учетных записей, теперь я хочу показать определенную таблицу из базы данных. Это потребовало от меня использования mysqli_query. Но это показывает ошибку.

db_connect.php

• Проверьте, нет ли электронной почты в базе данных с помощью подготовленных инструкций
• Предупреждение: mysqli_fetch_array () ожидает, что параметр 1 будет mysqli_result, null указан в /public_html/access/login.php в строке 15
• список всех таблиц в базе данных с MySQLi
• Медленная производительность MySql
• UPDATE Code вызывает ошибку, но мне все хорошо:

$mysqli = new mysqli(HOST, USER, PASSWORD, DATABASE); if ($mysqli->connect_error) { header("Location: ../error.php?err=Unable to connect to MySQL"); exit(); } 

function.php

 <?php include_once 'psl-config.php'; function sec_session_start() { $session_name = 'sec_session_id'; // Set a custom session name $secure = SECURE; // This stops JavaScript being able to access the session id. $httponly = true; // Forces sessions to only use cookies. if (ini_set('session.use_only_cookies', 1) === FALSE) { header("Location: ../error.php?err=Could not initiate a safe session (ini_set)"); exit(); } // Gets current cookies params. $cookieParams = session_get_cookie_params(); session_set_cookie_params($cookieParams["lifetime"], $cookieParams["path"], $cookieParams["domain"], $secure, $httponly); // Sets the session name to the one set above. session_name($session_name); session_start(); // Start the PHP session session_regenerate_id(); // regenerated the session, delete the old one. } function login($email, $password, $mysqli) { // Using prepared statements means that SQL injection is not possible. if ($stmt = $mysqli->prepare("SELECT user_id, username, password, salt FROM ***** WHERE email = ? LIMIT 1")) { $stmt->bind_param('s', $email); // Bind "$email" to parameter. $stmt->execute(); // Execute the prepared query. $stmt->store_result(); // get variables from result. $stmt->bind_result($user_id, $username, $db_password, $salt); $stmt->fetch(); // hash the password with the unique salt. $password = hash('sha512', $password . $salt); if ($stmt->num_rows == 1) { // If the user exists we check if the account is locked // from too many login attempts if (checkbrute($user_id, $mysqli) == true) { // Account is locked // Send an email to user saying their account is locked return false; } else { // Check if the password in the database matches // the password the user submitted. if ($db_password == $password) { // Password is correct! // Get the user-agent string of the user. $user_browser = $_SERVER['HTTP_USER_AGENT']; // XSS protection as we might print this value $user_id = preg_replace("/[^0-9]+/", "", $user_id); $_SESSION['user_id'] = $user_id; // XSS protection as we might print this value $username = preg_replace("/[^a-zA-Z0-9_\-]+/", "", $username); $_SESSION['username'] = $username; $_SESSION['login_string'] = hash('sha512', $password . $user_browser); // Login successful. return true; } else { // Password is not correct // We record this attempt in the database $now = time(); if (!$mysqli->query("INSERT INTO login_attempts(user_id, time) VALUES ('$user_id', '$now')")) { header("Location: ../error.php?err=Database error: login_attempts"); exit(); } return false; } } } else { // No user exists. return false; } } else { // Could not create a prepared statement header("Location: ../error.php?err=Database error: cannot prepare statement"); exit(); } } function checkbrute($user_id, $mysqli) { // Get timestamp of current time $now = time(); // All login attempts are counted from the past 2 hours. $valid_attempts = $now - (2 * 60 * 60); if ($stmt = $mysqli->prepare("SELECT time FROM login_attempts WHERE user_id = ? AND time > '$valid_attempts'")) { $stmt->bind_param('i', $user_id); // Execute the prepared query. $stmt->execute(); $stmt->store_result(); // If there have been more than 5 failed logins if ($stmt->num_rows > 5) { return true; } else { return false; } } else { // Could not create a prepared statement header("Location: ../error.php?err=Database error: cannot prepare statement"); exit(); } } function login_check($mysqli) { // Check if all session variables are set if (isset($_SESSION['user_id'], $_SESSION['username'], $_SESSION['login_string'])) { $user_id = $_SESSION['user_id']; $login_string = $_SESSION['login_string']; $username = $_SESSION['username']; // Get the user-agent string of the user. $user_browser = $_SERVER['HTTP_USER_AGENT']; if ($stmt = $mysqli->prepare("SELECT password FROM ****** WHERE user_id = ? LIMIT 1")) { // Bind "$user_id" to parameter. $stmt->bind_param('i', $user_id); $stmt->execute(); // Execute the prepared query. $stmt->store_result(); if ($stmt->num_rows == 1) { // If the user exists get variables from result. $stmt->bind_result($password); $stmt->fetch(); $login_check = hash('sha512', $password . $user_browser); if ($login_check == $login_string) { // Logged In!!!! return true; } else { // Not logged in return false; } } else { // Not logged in return false; } } else { // Could not prepare statement header("Location: ../error.php?err=Database error: cannot prepare statement"); exit(); } } else { // Not logged in return false; } } function esc_url($url) { if ('' == $url) { return $url; } $url = preg_replace('|[^a-z0-9-~+_.?#=!&;,/:%@$\|*\'()\\x80-\\xff]|i', '', $url); $strip = array('%0d', '%0a', '%0D', '%0A'); $url = (string) $url; $count = 1; while ($count) { $url = str_replace($strip, '', $url, $count); } $url = str_replace(';//', '://', $url); $url = htmlentities($url); $url = str_replace('&amp;', '&', $url); $url = str_replace("'", ''', $url); if ($url[0] !== '/') { // We're only interested in relative links from $_SERVER['PHP_SELF'] return ''; } else { return $url; } } 

«psl-config.php» содержит записи соединений с DEFINE

Защищено

  <?php include_once 'includes/db_connect.php'; include_once 'includes/functions.php'; sec_session_start(); ?> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <title>Secure Login: Protected Page</title> <link rel="stylesheet" href="styles/main.css" /> </head> <body> <?php if (login_check($mysqli) == true) : ?> <p>Welcome <?php echo htmlentities($_SESSION['username']); ?>!</p> <p> This is an example protected page. To access this page, users must be logged in. At some stage, we'll also check the role of the user, so pages will be able to determine the type of user authorised to access the page. </p> <?php $user_id = htmlentities($_SESSION['user_id']); // Check connection if ($mysqli->connect_error) { die("Connection failed: " . $mysqli->connect_error); // showing added broker $result= mysqli_query($mysqli,"SELECT accountno,*****,*****,***** FROM *** WHERE user_id = $user_id"); echo "<table border='1'> <tr> <th>Account No</th> <th>******</th> <th>*****</th> <th>****</th> </tr>"; while($row = mysqli_fetch_array($result)) { echo "<tr>"; echo "<td>" . $row['****'] . "</td>"; echo "<td>" . $row['****'] . "</td>"; echo "<td>" . $row['*****'] . "</td>"; echo "<td>" . $row['*****'] . "</td>"; echo "</tr>"; } echo "</table>"; $mysqli->close(); ?> <p>Return to <a href="index.php">login page</a></p> <?php else : ?> <p> <span class="error">You are not authorized to access this page.</span> Please <a href="index.php">login</a>. </p> <?php endif; ?> </body> </html> 

Это дает мне ошибку

Предупреждение: mysqli_fetch_array () ожидает, что параметр 1 будет mysqli_result, boolean Эта ошибка была сгенерирована для кода линии protected_page.php

while ($ row = mysqli_fetch_array ($ result))

Попытка 2: с операцией make mysqli: https://pastebin.com/2WzDg9zs

показывает ошибку на «Вызов функции-члена bind_param () на boolean« в этой строке »$ stmt-> bind_param ('s', $ user_id);

Попытка 3: Решение ошибок. Имя таблицы было неправильным. Поэтому я исправил это. Но теперь не показывать данные на таблице. с fetch () Его построение таблицы. Но нет данных? Вот код:

  $stmt = $mysqli->prepare('SELECT accountno,accountname,cname,revenue,status FROM ***** WHERE user_id = ? '); $stmt->bind_param('i', $user_id); $stmt->bind_result($accountno ,$accountname, $cname, $revenue,$status); $stmt->execute(); // Execute the prepared query. echo "<table border='1'> <tr> <th>Account No</th> <th>Account Name</th> <th>Company Name</th> <th>Revenue</th> <th>Status</th> </tr>"; while($row = $stmt->fetch()) { echo "<tr>"; echo "<td>" . $row['accountno'] . "</td>"; echo "<td>" . $row['accountname'] . "</td>"; echo "<td>" . $row['cname'] . "</td>"; echo "<td>" . $row['revenue'] . "</td>"; echo "<td>" . $row['status'] . "</td>"; echo "</tr>"; } $stmt->close(); echo "</table>"; 

Решение найдено здесь: