What are the potential pitfalls of using PHP to import data from a CSV file into a database table?

One potential pitfall of using PHP to import data from a CSV file into a database table is the risk of SQL injection if the data is not properly sanitized. To prevent this, you should use prepared statements when inserting data into the database. Additionally, you should handle errors that may occur during the import process to ensure data integrity. 

// Establish database connection
$pdo = new PDO("mysql:host=localhost;dbname=mydatabase", "username", "password");

// Open the CSV file for reading
$csvFile = fopen('data.csv', 'r');

// Prepare the SQL statement
$stmt = $pdo->prepare("INSERT INTO table_name (column1, column2) VALUES (:value1, :value2)");

// Loop through each row in the CSV file
while (($data = fgetcsv($csvFile)) !== false) {
    // Bind parameters and execute the statement
    $stmt->bindParam(':value1', $data[0]);
    $stmt->bindParam(':value2', $data[1]);
    $stmt->execute();
}

// Close the CSV file and database connection
fclose($csvFile);
$pdo = null;

Keywords

CSV database import PHP functions error handling

Related Questions