Hi there I am new at this website thanks for every one that help me
I have this output appear on the link below:
I want to while I choosing a Time value this value must be send for these useres that absence row the checkbox is checked
this is my code:
$s_id=$_POST['s_id'];
$date=$_POST['datee'];
$time=$_POST['time'];
for($i=0;$i<$num_rows;$i++)
{
$insert="INSERT INTO table(id,s_id,date,time) VALUES(null,'$s_id[$i]','$date','$time')";
mysqli_query($con,$insert) or die(mysqli_error($con));
}Jump to PostUse prepared statement instead of direct insert to prevent from SQL injection!
Naming checkboxes with empty quadratic brackets e.g.<input type="checkbox" name="s_id[]" value="1" /> <input type="checkbox" name="s_id[]" value="2" /> <input type="checkbox" name="s_id[]" value="3" />PHP
$s_id=filter_input(INPUT_POST,'s_id',FILTER_VALIDATE_INT,FILTER_REQUIRE_ARRAY); $date=filter_input(INPUT_POST,'datee'); $time=filter_input(INPUT_POST,'time'); $stmt = mysqli_prepare($con, "INSERT INTO …
Use prepared statement instead of direct insert to prevent from SQL injection!
Naming checkboxes with empty quadratic brackets e.g.
<input type="checkbox" name="s_id[]" value="1" />
<input type="checkbox" name="s_id[]" value="2" />
<input type="checkbox" name="s_id[]" value="3" />PHP
$s_id=filter_input(INPUT_POST,'s_id',FILTER_VALIDATE_INT,FILTER_REQUIRE_ARRAY);
$date=filter_input(INPUT_POST,'datee');
$time=filter_input(INPUT_POST,'time');
$stmt = mysqli_prepare($con, "INSERT INTO table(id,s_id,date,time) VALUES(null,?,?,?)");
mysqli_stmt_bind_param($stmt, "iss", $id,$d,$t);
$d=$date;
$t=$time;
foreach($s_id as $val){
$id = $val;
mysqli_stmt_execute($stmt);
}@Talib_1 this is (procedural) MySQLi method not PDO. The PDO would look something like this:
$stmt = $con->prepare("INSERT INTO table(id,s_id,date,time) VALUES (null,:s_id,:date,:time)");
$stmt->bindParam(':date', $date, PDO::PARAM_STR);
$stmt->bindParam(':time', $time, PDO::PARAM_STR);
foreach($s_id as $val){
$stmt->bindParam(':s_id', $val, PDO::PARAM_INT);
$stmt->execute();
}MySQLi method is shown in my first respond.
If you use bindParam() (PDO method - my second respond) $con should be PDO object.
Read http://php.net/manual/en/mysqli-stmt.bind-param.php and http://php.net/manual/en/pdostatement.bindparam.php
We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.