send array[] from php to mysql

Question

im working on a project but first i would to understand one thing.

i have 2 input type text field with name="firstname[]" as an array (in the example im working with no jquery but it will be generated dinamically with it) and cant make it to mysql.

here is what i have: index.php

<html>
<body>

<form action="insert.php" method="post">
Firstname: <input type="text" name="firstname[]"> <br>
Firstname 2: <input type="text" name="firstname[]">
<input type="submit">
</form>

</body>
</html>

insert.php

<?php
$con=mysqli_connect("localhost","inputmultiplicad","inputmultiplicado","inputmultiplicado");
// Check connection
if (mysqli_connect_errno())
  {
  echo "Failed to connect to MySQL: " . mysqli_connect_error();
  }




$sql="INSERT INTO input_field (firstname)
VALUES
('$_POST[firstname]')";

if (!mysqli_query($con,$sql))
  {
  die('Error: ' . mysqli_error($con));
  }
echo "1 record added";

mysqli_close($con);
?>

the question is: how can i send the firstname[] array to the mysql database?

thanks for your time

You should use foreach . Follow this example: stackoverflow.com/questions/779986/… — AdiCrainic
– AdiCrainic, Commented Mar 6, 2014 at 17:19
First, read this about SQL injections: stackoverflow.com/questions/60174/… - second, you would need to loop through the array. — WWW
– WWW, Commented Mar 6, 2014 at 17:19

Dan Bechard · Accepted Answer · 2014-03-06 17:28:41Z

0

This should work:

//Escape user input
$names = array_map('mysql_real_escape_string', $_POST[firstname]);

//Convert array to comma-delimited list
$names = rtrim(implode(',', $names), ',');

//Build query
$sql="INSERT INTO input_field (firstname) VALUES ('$names')";

Note: In general, it's better to use parameterized queries than mysql_real_escape_string(), but the latter is much safer than no escaping at all.

edited Mar 6, 2014 at 17:28

answered Mar 6, 2014 at 17:22

Dan Bechard

5,2913 gold badges38 silver badges52 bronze badges

hi, thanks for your response, but is not working, it gets empty to the database

garbanm
– garbanm

03/06/2014 17:35:59
Commented Mar 6, 2014 at 17:35

Add a comment |

Philip Bennison · Accepted Answer · 2014-03-07 08:44:12Z

0

The following should generate the SQL statement you need. Remember to use mysql_escape_string before putting it into your database, though! Or even better, use PDO and bind the values. :)

$values = array();
$sql = "INSERT INTO table (firstname) VALUES ";
foreach ($_POST['firstname'] as $name) {
    $values[] = "('".mysql_real_escape_string($name)."')";
}
$sql .= implode(",", $values);

edited Mar 7, 2014 at 8:44

answered Mar 6, 2014 at 17:21

Philip Bennison

5272 silver badges11 bronze badges

This doesn't trim the trailing comma and uses the wrong escape function.

Dan Bechard
– Dan Bechard

03/06/2014 17:25:16
Commented Mar 6, 2014 at 17:25
i get this error Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '{firstname} VALUES ('Name 1'),('Name 2')' at line 1, im working with MAMP 2

garbanm
– garbanm

03/06/2014 17:39:12
Commented Mar 6, 2014 at 17:39
Thanks for pointing out the typo, Dan. :) However, there is no trailing comma. The implode function will handle that.

Philip Bennison
– Philip Bennison

03/07/2014 08:43:47
Commented Mar 7, 2014 at 8:43
Sorry, garbanm. There should be basic parentheses around the firstname.

Philip Bennison
– Philip Bennison

03/07/2014 08:45:30
Commented Mar 7, 2014 at 8:45

Add a comment |

Collectives™ on Stack Overflow

send array[] from php to mysql

2 Answers 2

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Your Answer

Sign up or log in

Post as a guest

Linked

Related