What are some best practices for retrieving data from an external database in PHP?

When retrieving data from an external database in PHP, it is important to use parameterized queries to prevent SQL injection attacks. Additionally, it is recommended to establish a secure connection to the database using PDO or MySQLi to ensure data integrity. Finally, always remember to sanitize and validate user input before executing any database queries. 

// Establish a connection to the external database using PDO
$servername = "localhost";
$username = "username";
$password = "password";
$dbname = "database";

try {
    $conn = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password);
    $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
} catch(PDOException $e) {
    echo "Connection failed: " . $e->getMessage();
}

// Retrieve data from the external database using a parameterized query
$stmt = $conn->prepare("SELECT * FROM table WHERE column = :value");
$stmt->bindParam(':value', $value);
$stmt->execute();
$result = $stmt->fetchAll();

// Iterate over the result set and process the data
foreach($result as $row) {
    // Process each row of data here
}

// Close the database connection
$conn = null;

Keywords

SQL injection PDO prepared statements database connection error handling

Related Questions