PHP executes the specified sql statement

This function is primarily used to execute SQL statements and returns whether the operation was successful or not!

/**
 * 执行指定的 SQL 语句
 *
 * @param string $sql 要执行的 SQL 语句
 * @param string $db_host 数据库主机名
 * @param string $db_user 数据库用户名
 * @param string $db_password 数据库密码
 * @param string $db_name 数据库名
 *
 * @return bool|mysqli_result 执行结果，如果执行成功，则返回一个 mysqli_result 对象，否则返回 false
 */
function executeSQL($sql, $db_host, $db_user, $db_password, $db_name) {
    // 创建 MySQL 数据库连接
    $conn = new mysqli($db_host, $db_user, $db_password, $db_name);

    // 检查连接是否成功
    if ($conn->connect_error) {
        die("连接失败: " . $conn->connect_error);
    }

    // 执行 SQL 语句
    $result = $conn->query($sql);

    // 关闭 MySQL 数据库连接
    $conn->close();

    // 返回执行结果
    return $result;
}

This function accepts five parameters; the first parameter sql The SQL statement to be executed; the last four parameters. db_host、db_user、db_password 和 db_name These parameters represent the MySQL database's hostname, username, password, and database name, respectively. The function returns a mysqli_result object representing the execution result; if the execution fails, it returns false.

Within the function, first create a MySQL database connection, then use it. query() Executes the specified SQL statement and stores the execution result in $result The variable is used. Finally, the function closes the MySQL database connection and returns the execution result.

Please note that since this function executes a specified SQL statement, you must ensure that the SQL statement provided is correct and does not cause any unintended impact on the database. For security reasons, it is recommended to validate and filter user-input SQL statements to prevent security vulnerabilities such as SQL injection.