How can static values be successfully inserted into a database query in PHP?

When inserting static values into a database query in PHP, you can simply include the values directly in the query string. Make sure to properly sanitize and validate the values to prevent SQL injection attacks. It is recommended to use prepared statements with placeholders for dynamic values to ensure security. 

<?php
// Static values to be inserted
$value1 = "John";
$value2 = 25;

// Database connection
$servername = "localhost";
$username = "username";
$password = "password";
$dbname = "database";

$conn = new mysqli($servername, $username, $password, $dbname);

// Check connection
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

// Insert static values into database
$sql = "INSERT INTO table_name (column1, column2) VALUES ('$value1', $value2)";

if ($conn->query($sql) === TRUE) {
    echo "Record inserted successfully";
} else {
    echo "Error: " . $sql . "<br>" . $conn->error;
}

$conn->close();
?>

Keywords

PHP static values database query SQL injection prepared statements

Related Questions