Dan
Dan

Reputation: 2174

How to insert data into mysql database using oops php5 concepts?

I am new for PHP5 OOP concept. Please give some example source code for "How to insert data using oops concept?".I want to use pure php5 concept for this even in the connection.php page also. I want to improve my knowledge. please any one help me....

I know below the basic concept

insert_db.php

                $sql="INSERT INTO Persons (FirstName, LastName, Age)
            VALUES
            ('$_POST[firstname]','$_POST[lastname]','$_POST[age]')";

            if (!mysql_query($sql,$con))
              {
              die('Error: ' . mysql_error());
              }
            echo "1 record added";

            mysql_close($con)

connectio.php

          <?php
            // connect database  code
             $dbhost ='localhost';
            $dbuser = 'tomking';
            $dbpass = 'dsfds';
            $dbname = 'mydb';
            //connectivity of database
            $conn = mysql_connect($dbhost,$dbuser,$dbpass) or die ('Error Connecting to mysql');
            mysql_select_db($dbname);
          ?>

Upvotes: 0

Views: 9485

Answers (2)

Yogesh Suthar
Yogesh Suthar

Reputation: 30488

Use Mysqli or PDO for using sql queries instead of directly pass variables to query.

This will cause sql injection when you directly pass variable to query

If you want to pass variable to sql query , you have to use filters for this

filtering-escaping-post-data-from-injection-attacks

PDO Documentation

MySQLi Documentation

And this is all pure PHP5 concept.

Upvotes: 1

Mihai Matei
Mihai Matei

Reputation: 24276

$mysqli = new mysqli($hostname, $username, $password, $database_name);

if($mysqli->error)
    die($mysqli->error);

$mysqli->query("SET NAMES 'UTF8'");

$query = "INSERT INTO my_table VALUES ('value_1', 'value_2')";
$mysqli->query($query);
if(!$mysql->error)
   echo 'do something';

$query = "SELECT * FROM my_table";
$sql = $mysqli->query($query);
if($sql->num_rows > 0) {
    while($row = $sql->fetch_assoc()) {
        echo $row['field_1'];
    }
}
$sql->close();

Upvotes: 1

Related Questions