What are some potential pitfalls when trying to separate output from a server query into a table format using PHP?

When trying to separate output from a server query into a table format using PHP, a potential pitfall is not properly handling the data structure returned from the query. To solve this, you should iterate through the query result and format it into table rows and columns. Another pitfall is not properly escaping the data to prevent SQL injection attacks. 

// Assuming $queryResult contains the result of the server query

echo "<table>";
foreach ($queryResult as $row) {
    echo "<tr>";
    foreach ($row as $value) {
        echo "<td>" . htmlspecialchars($value) . "</td>";
    }
    echo "</tr>";
}
echo "</table>";

Keywords

SQL injection PDO prepared statements data validation XSS protection

Related Questions