This is a much more secure way to insert records and prevent MySQL injection. This assumes that $this-conn is your MySQLi PDO database connection object that you’ve already initialized:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 | <?php public function insert_referred($id,$name,$email) { if ($email==”) {return false;} $new_date = date(“m-d-Y”); $name=addslashes($name); $email=addslashes($email); $sql = “INSERT INTO referred (id, name, email,date) VALUES (?,?,?,?)”; $stmt = $this->conn->prepare($sql); if( $stmt->bind_param(‘isss’,$id,$name,$email,$new_date) ){ $stmt->execute(); $stmt->close(); return true; } else { echo 'Entry Failed, please try again later.'; return false; } } |
Please note that a lot of the PHP snippets on this site assume you have some level of PHP experience. I use this site as a repository of many frequent code snippets and things I find I look up a lot as a central way to reference materials. Feel free to use and share as you see fit!
– Aaron Belchamber
