PHP表单成功发布到MySQL数据库，但添加空白行

Two things helped me in the process of finding my answer;

A) The conversion of my PHP processing page to PDO;

    <?php
    if (isset($_POST['submit'])) {
    $ArticleTitle = $ArticleLink = $ArticleBody = $ArticleCategory = $Datum = '';

    // Define a boolean and set to true before validating
    $formValid = true;

    // Data pulled from input form
    $ArticleTitle = $_POST['title'];
    $ArticleLink = $_POST['link'];
    $ArticleBody = $_POST['body'];
    $ArticleCategory = $_POST['category'];

    //Set date parameters
    $Datum = date('D - M. j - g:ia');

    if ($_SERVER['REQUEST_METHOD'] == "POST") {
    if ($_POST['title'] == null OR trim($_POST['title']) ==''|| $_POST['link'] == null OR trim($_POST['link']) =='' || $_POST['body'] == null OR trim($_POST['body']) =='' || $_POST['category'] == null OR trim($_POST['category']) =='') {
        echo '<br><br><div align="center"><a href="input.php"><font color="#0000CC" face="arial black">Please return to form and supply required data!</font></a><br><img src="http://www.promodrone.com/images/myimage.gif"></div>';
        $formValid = false; // Invalid input - set the flag to false
        exit;
        } else {

        if ($formValid){

        //PDO connection string details
        try {
        $dsn = 'mysql:host=localhost;dbname=dbname';
        $username ='user_name';
        $password ='pwd';
        $options = array(PDO::MYSQL_ATTR_INIT_COMMAND => 'SET NAMES utf8', PDO::ATTR_ERRMODE =>PDO::ERRMODE_EXCEPTION, PDO::ATTR_EMULATE_PREPARES, false); 
        $dbh = new PDO($dsn, $username, $password, $options);
        } catch (Exception $e) {
        echo "WTF?!" . $e->getMessage('Cannot connect: ' . mysql_error());
        }
         //Insert data into db
            try {
            $sth = $dbh->prepare('INSERT INTO articles(title, link, body, category, date) VALUES (?, ?, ?, ?, ?)');
            $sth->execute(array($ArticleTitle, $ArticleLink, $ArticleBody, $ArticleCategory, $Datum));

            //If successful redirect to display database insertion details
            if($sth){
            exit(include('thanks.php'));
            }                 
            else{
            echo '<a href="input.php"><font color="#0000CC" face="arial black">No record added. Return to form, please!</font></a>';
            }
            } catch (Exception $e) {
            echo "Glugh?!" . $e->getMessage('Cannot continue:  <a href="input.php"><font color="#0000CC" face="arial black" size="3">Return to form, please!</font></a>' . mysql_error());
            }
            }
            }
            }
            } 
            $dbh = NULL;
            ?>

and, B) that you have to check SUPER-THOROUGHLY so you don't commit errors caused by overlooking.

On my index.php page, I didn't close a table correctly and, somehow, that kept helping to insert an extra (empty) row in the database. I was only led there this afternoon, after I took a spin at another coding website I have an account with. For some reason, I was compelled to look at the HTML table structure. My forehead is STILL sore from the nuclear facepalm after my realization;

             echo "<p style='font-size:95%'><b>Category -</b><b>";
             echo "</b></p></table></center><br>";

NOT

             echo "<p style='font-size:95%'><b>Category -</b><b>";
             echo "</p></b></font></table></center><br>";

The only thing that I'm NOT happy about is I had to destroy my nice little "P/R/G" pattern, since I couldn't (no matter what I tried), get the vars from the processing page (backend.php) to be echoed from the thanks.php page. The reason for this is that when a user finishes entering the details of their article/news URL, the thanks php is supposed to present them with their input;

             $ArticleTitle    (Article/News title)
             $ArticleLink     (Article/News link)
             $ArticleBody     (Article/News content/image body)
             $ArticleCategory (Article/News category)

stacked exactly in the above fashion. Since earlier this afternoon, I've played the complete paranoiac (lol), because I jumped the gun and celebrated too early the night before. My solution has held for me since this afternoon, and the same error described above in the HTML table had been replicated to all the other category index pages. After changing them all in one fell swoop via my IDE, I tested rigorously by adding ten more entries back to back (about three hours ago), and I haven't even seen the problem pop-up again. :deep sigh: (lol!). Hope this helps someone. I don't know if this is even SLIGHTLY off-topic (and I'm sure that someone will let me know), but the time of MySQL is FINISHED. I understand why many people aren't gung-ho on PHP Data Objects, but after a period of seven days straight on it, it began to "talk" to me. I'M - NEVER - GOING - BACK.....now, to rewrite the rest of the application (lol!).

Well, there is advice on your overall database structure, but your data filtering sanitizing—and overall chain of logic connected to the data being inserted—could be improved to truly have content if there only if there is content. So I would change this:

   $ArticleTitle = mysql_real_escape_string(strip_tags($_POST['Title']));
   $ArticleBody = mysql_real_escape_string(stripslashes($_POST['Body']));
   $ArticleLink = mysql_real_escape_string(strip_tags($_POST['Link'],'<a>'));
   $ArticleCategory = mysql_real_escape_string($_POST['category']);

To this:

   // Let’s set all the variables to null to begin with.
   $ArticleTitle = $ArticleBody = $ArticleLink = $ArticleCategory = null;

   // Here is an array of variables from '$_POST' as the key with final variables as a value.
   $post_variables = array('Title' => 'ArticleTitle', 'Body' => 'ArticleBody', 'Link' => 'ArticleLink', 'category' => 'ArticleCategory');

   // Here is an array of items that are links, so they should be parsed differently.
   $link_variables = array('Link');

   // Roll through the '$post_variables'.
   foreach ($post_variables as $post_key => $post_variable) {

     // Check if the keys exist in $_POST.
     if (array_key_exists($post_key, $_POST) && !empty(trim($_POST))) {

       // Check if the key needs special handling in $link_variables.
       if (in_array($post_key, $link_variables)) {
         $$post_variable = mysql_real_escape_string(strip_tags($_POST[$post_variable]),'<a>');
       }
       // If it doesn't need special handling, set it as normal.
       else {
         $$post_variable = mysql_real_escape_string(strip_tags($_POST[$post_variable]));
       }

     }

   }

This new method does a few things. First, it restructures your variable sanitizing logic to be in arrays to avoid repeated code. But more importantly, it makes sure your values are set only if the content is truly there and not a stray empty space submitted in a form. If that happens, the variable comes out as simply null and at that point it can be inserted into your MySQL table as such.

Also the logic for CHECK FOR EMPTY FIELDS should be changed to factor in the sanitizing like so. I mean, we have already checked the $_POST so why do it again? Work with the data that is now known to be clean & valid. Also, I find it best for the if to be a positive outcome and the else to be the fallback. I mean, the goal is not to have errors, the if is basically confirming the positive condition of a data validation chain, right?

// If the fields are not empty, insert it.
if (!empty($ArticleTitle) || !empty($ArticleBody) || !empty($ArticleLink) || !empty($ArticleCategory)) {

  $query1 = sprintf("INSERT INTO articles (title, link, body, date, category) VALUES ('%s', '%s', '%s', '%s', '%s')", $ArticleTitle, $ArticleLink, $ArticleBody, $Datum, $ArticleCategory);

  // Execute the query or die and echo an error message
  mysql_query($query1) or die("Unable to execute query:" . mysql_error());

  if ($query1) {
    include("thanks.php");
  }
  else {
    header('Location: input.php');
  }
  mysql_close($con);
}
else {
  $error = ''; 
  if (empty($ArticleTitle)) { 
   $error .= "<li>Please enter a title</li>"; 
  }
  elseif (empty($ArticleBody)) { 
    $error .= "<li>Please enter some content</li>"; 
  }
  elseif (empty($ArticleLink)) { 
    $error .= "<li>Please enter a URL</li>"; 
  }
  elseif (empty($ArticleCategory)){ 
    $error .= "<li>Please enter a category</li>"; 
  }
}

EDIT Also, adding some overall advice on PHP form processing you have in backend.php. In general, it seems muddled. I mean, all of it works, but it is also causing you problems, right? Okay, so this is the basic flow of what it should be:

1. Sanitize the data.
2. If after sanitizing the data is valid by your criteria, do the MySQL work.
3. If after sanitizing, the data is invalid, generate error messages. 3.

I know this sounds obvious, but when I see your code is making a MySQL connection prior to validating, the only question that comes to mind is: Why? Why open a connection when you have no idea the data is valid? Only set a MySQL connection when you know you need it.