为什么PHP在mysql表数据库中插入变量名[关闭](Why is PHP inserting variable name in mysql table database [closed])

 我正在制作PHP登录/注册表单。 
 
 我做了登录，注册和配置成功，它的工作原理，但我真的无法理解为什么我的代码将变量名称“email1”和“pass1”插入表而不是我输入的内容？ 
 
 请帮助我彻底查看它大约50次，不能看到什么是错的。 
 
 这是我的REGISTER表格： 
 
    <?php
require ('config.php');

if(isset($_POST['submit'])){

//Perform the verification

          $email1 = $_POST['email1'];
          $email2 = $_POST['email2'];
          $pass1 = $_POST['pass1'];
          $pass2 = $_POST['pass2'];

          if($email1 == $email2){
                 if($pass1 == $pass2){
                  //All good carry on

                  $name = mysql_escape_string($_POST['name']);
                  $lname = mysql_escape_string($_POST['lname']);
                  $uname = mysql_escape_string($_POST['uname']);
                  $email1 = mysql_escape_string('email1');
                  $email2 = mysql_escape_string('email2');
                  $pass1 = mysql_escape_string('pass1');
                  $pass2 = mysql_escape_string('pass2');



                   $sql = mysql_query("SELECT * FROM `users` WHERE `uname` = '$uname'");
                   if (mysql_num_rows($sql) > 0){
                       echo "That user already exists";
                       exit();
                   }


          mysql_query("INSERT INTO `users`(`id`, `name`, `lname`, `uname`, `email`, `pass`) VALUES (NULL, '$name', '$lname', '$uname', '$email1', '$pass1')") or die(mysql_error());

            }else{
                echo "Sorry, your passwords do not match. <br />";
                exit();
            }           
          }else{
              echo "Sorry your emails do not match. <br />";      
          }





}else{

$form = <<<EOT
<form action="register.php" method="POST">
First Name: <input type="text" name="name" /><br />
Last Name: <input type="text" name="lname" /><br />
Username: <input type="text" name="uname" /><br />
Email: <input type="text" name="email1" /><br />
Confirm Email: <input type="text" name="email2" /><br />
Password: <input type="password" name="pass1" /><br />
Confirm password: <input type="password" name="pass2" /><br />
<input type="submit" value="Register" name="submit" />
</form>
EOT;

echo $form;

}

?>
 
 这是我的登录表格： 
 
<!--KODA ZA ŠUMNIKE-->
    <meta http-equiv="Content-Type" content="text/html;charset=utf-8" /> 
<?php
 require ('config.php');

if(isset($_POST['submit'])){
     $uname = mysql_escape_string($_POST['uname']);
     $pass = mysql_escape_string($_POST['pass']);


 $sql = mysql_query("SELECT * FROM `users` WHERE `uname` = '$uname' AND `pass` = '$pass'");
 if(mysql_num_rows($sql) > 0){
 echo "You are now logged in.";
 exit();
 }else{
       echo "Wrong username or password combination.";
 }

}else{

$form = <<<EOT
<form action="login.php" method="POST">
Username: <input type="text" name="uname" /><br />
Password: <input type="password" name="pass" /><br />
<input type="submit" value="Log in" name="submit" />
</form>
EOT;

echo $form;

}

I am making a PHP login/register forms.
 
I made the login, register and configure succesfully and it works, but I really cannot figure why is my code inserting variable names "email1" and "pass1" into table instead of what I type in?
 
Please help I reallly looked through it about 50 times and cant see whats wrong.
 
Here is my REGISTER form:
 
    <?php
require ('config.php');

if(isset($_POST['submit'])){

//Perform the verification

          $email1 = $_POST['email1'];
          $email2 = $_POST['email2'];
          $pass1 = $_POST['pass1'];
          $pass2 = $_POST['pass2'];

          if($email1 == $email2){
                 if($pass1 == $pass2){
                  //All good carry on

                  $name = mysql_escape_string($_POST['name']);
                  $lname = mysql_escape_string($_POST['lname']);
                  $uname = mysql_escape_string($_POST['uname']);
                  $email1 = mysql_escape_string('email1');
                  $email2 = mysql_escape_string('email2');
                  $pass1 = mysql_escape_string('pass1');
                  $pass2 = mysql_escape_string('pass2');



                   $sql = mysql_query("SELECT * FROM `users` WHERE `uname` = '$uname'");
                   if (mysql_num_rows($sql) > 0){
                       echo "That user already exists";
                       exit();
                   }


          mysql_query("INSERT INTO `users`(`id`, `name`, `lname`, `uname`, `email`, `pass`) VALUES (NULL, '$name', '$lname', '$uname', '$email1', '$pass1')") or die(mysql_error());

            }else{
                echo "Sorry, your passwords do not match. <br />";
                exit();
            }           
          }else{
              echo "Sorry your emails do not match. <br />";      
          }





}else{

$form = <<<EOT
<form action="register.php" method="POST">
First Name: <input type="text" name="name" /><br />
Last Name: <input type="text" name="lname" /><br />
Username: <input type="text" name="uname" /><br />
Email: <input type="text" name="email1" /><br />
Confirm Email: <input type="text" name="email2" /><br />
Password: <input type="password" name="pass1" /><br />
Confirm password: <input type="password" name="pass2" /><br />
<input type="submit" value="Register" name="submit" />
</form>
EOT;

echo $form;

}

?>
 
Here is my LOGIN form:
 
<!--KODA ZA ŠUMNIKE-->
    <meta http-equiv="Content-Type" content="text/html;charset=utf-8" /> 
<?php
 require ('config.php');

if(isset($_POST['submit'])){
     $uname = mysql_escape_string($_POST['uname']);
     $pass = mysql_escape_string($_POST['pass']);


 $sql = mysql_query("SELECT * FROM `users` WHERE `uname` = '$uname' AND `pass` = '$pass'");
 if(mysql_num_rows($sql) > 0){
 echo "You are now logged in.";
 exit();
 }else{
       echo "Wrong username or password combination.";
 }

}else{

$form = <<<EOT
<form action="login.php" method="POST">
Username: <input type="text" name="uname" /><br />
Password: <input type="password" name="pass" /><br />
<input type="submit" value="Log in" name="submit" />
</form>
EOT;

echo $form;

}

原文：https://stackoverflow.com/questions/22174449