kankys/PHP_DS_Project
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

99 ochrana proti injecton útoku

Browse Source
This commit is contained in:
kankys 2024-09-26 09:08:30 +02:00
parent f32240acaf
commit 0ab7f4a47f
1 changed files with 13 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
www2databaze/pridat-zaka.php
View File

@ -7,21 +7,20 @@ if ($_SERVER ["REQUEST_METHOD"] === "POST") {
require "assets/database.php"; require "assets/database.php";
$sgl = "INSERT INTO student (first_name, second_name, age, life, college) $sgl = "INSERT INTO student (first_name, second_name, age, life, college)
VALUES ('" . $_POST["first_name"] . "','" VALUES (?, ?, ?, ?, ?)";
. $_POST["second_name"] . "','" $statement = mysqli_prepare($connection, $sgl);
. $_POST["age"] . "','"
. $_POST["life"] . "','"
. $_POST["college"] . "')";
// var_dump($sgl);
// exit;
$result = mysqli_query($connection, $sgl);
if ($result === false) { mysqli_stmt_bind_param($statement, "ssiss", $_POST["first_name"], $_POST["second_name"], $_POST["age"], $_POST["life"], $_POST["college"]);
echo mysqli_error($connection); mysqli_stmt_execute($statement);
} else {
$id = mysqli_insert_id($connection); // $result = mysqli_query($connection, $sgl);
echo "Úspěšně vložen žák s ID: $id"; //
} // if ($result === false) {
// echo mysqli_error($connection);
// } else {
// $id = mysqli_insert_id($connection);
// echo "Úspěšně vložen žák s ID: $id";
// }
} }
?> ?>
<!DOCTYPE html> <!DOCTYPE html>