What are some best practices for updating data in a MySQL database using PHP?

When updating data in a MySQL database using PHP, it is important to sanitize user input to prevent SQL injection attacks. Additionally, it is recommended to use prepared statements to securely update data in the database. Finally, always remember to close the database connection after updating the data. 

<?php
// Establish a connection to the database
$servername = "localhost";
$username = "username";
$password = "password";
$dbname = "database";

$conn = new mysqli($servername, $username, $password, $dbname);

// Check connection
if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}

// Sanitize user input
$id = mysqli_real_escape_string($conn, $_POST['id']);
$newValue = mysqli_real_escape_string($conn, $_POST['new_value']);

// Prepare and execute the update statement
$stmt = $conn->prepare("UPDATE table_name SET column_name = ? WHERE id = ?");
$stmt->bind_param("si", $newValue, $id);
$stmt->execute();

// Close the connection
$stmt->close();
$conn->close();
?>

Keywords

MySQL PHP data update SQL injection prepared statements

Related Questions