What are common pitfalls when working with arrays in PHP, especially when trying to insert data into a database?

Common pitfalls when working with arrays in PHP, especially when trying to insert data into a database, include not properly sanitizing user input, not validating data before insertion, and not handling errors effectively. To avoid these pitfalls, always sanitize user input to prevent SQL injection attacks, validate data to ensure it meets the required format and constraints, and handle database errors gracefully to provide meaningful feedback to users. 

// Example code snippet demonstrating how to properly sanitize user input before inserting into a database

// Assuming $db is your database connection

// Sanitize user input
$name = mysqli_real_escape_string($db, $_POST['name']);
$email = mysqli_real_escape_string($db, $_POST['email']);
$age = (int)$_POST['age'];

// Validate data
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
    echo "Invalid email address";
    exit;
}

// Insert data into database
$query = "INSERT INTO users (name, email, age) VALUES ('$name', '$email', $age)";
$result = mysqli_query($db, $query);

if ($result) {
    echo "Data inserted successfully";
} else {
    echo "Error inserting data: " . mysqli_error($db);
}

Keywords

arrays PHP database insertion errors

Related Questions