mysql 防sql注入demo

<?php
$dbHost = '127.0.0.1';
$dbName = 'imooc_app_server';
$dbUser = 'root';
$dbPwd = 'root';

//建立连接
$mysqli = new mysqli($dbHost,$dbUser,$dbPwd,$dbName);
if ($mysqli->connect_error){
    die('content mysql error errno is' . $mysqli->connect_errno . 'error is' . $mysqli->connect_error);
}
//设置编码集
$mysqli->set_charset('utf8');
//写sql
$id = $_GET['id'];
$sql = 'select * from test1 where id = ?';
$stmt = $mysqli->prepare($sql);
$stmt->bind_param('i',$id);
//执行sql
$stmt->execute();
//处理
$re = $stmt->get_result();//获取结果
$data = $re->fetch_all(MYSQLI_ASSOC);
var_dump($data);

//关闭
$re->close();
$mysqli->close();