This question already has an answer here:
- How can I prevent SQL-injection in PHP? 28 answers
I'm having difficulties inserting php array into mysql database. Could you please see what am I doing wrong? how i can insert this data
My HTML form :
<form method="post" action="edu.php">
<label for="firstname">Firstname : </label>
<input type="text" id="firstname" name="firstname" />
<br><br>
<label for="surname">Surname : </label>
<input type="text" id="surname" name="surname" />
<br><br>
<label for="gender">Gender : </label>
<select id="gender" name="gender">
<option>Male</option>
<option>Female</option>
</select>
<br><br>
<input type="submit" value="Submit" />
<input type="hidden" value="submit" />
</form>
PHP CODE :
if(isset($_POST['submit'])){
$array = array(
array(
'id' => 'xx', /* i want this id [Auto] */
'firstName' => 'xxxx', /* i want this Dynamically form $_POST['firstname'] */
'surname' => 'xxxx', /* i want this Dynamically form $_POST['surname'] */
'gender' => 'xxxx', /* i want this Dynamically form $_POST['gender'] */
)
);
/* `education` tbl_structure */
/* edu_id int(11) AUTO_INCREMENT */
/* Education (longtext) */
$array_string=mysql_escape_string(serialize($array));
$insert = mysql_query("insert into education (Education) values($array_string)");
if($insert){
echo "Done";
}else{
echo "Error";
}
}