What is the best method to save and edit a longer text in PHP, considering it needs to be stored in a database and editable in a textarea?

When saving and editing longer text in PHP that needs to be stored in a database and editable in a textarea, the best method is to use prepared statements to prevent SQL injection and properly escape special characters. This ensures the text is securely stored and retrieved without any issues. Additionally, using htmlspecialchars when displaying the text in a textarea helps to prevent cross-site scripting attacks. 

// Save text to database
$stmt = $pdo->prepare("INSERT INTO table_name (text_column) VALUES (:text)");
$stmt->bindParam(':text', $_POST['text']);
$stmt->execute();

// Retrieve text from database and display in textarea
$stmt = $pdo->prepare("SELECT text_column FROM table_name WHERE id = :id");
$stmt->bindParam(':id', $id);
$stmt->execute();
$text = $stmt->fetch(PDO::FETCH_ASSOC)['text_column'];

echo '<textarea name="text">' . htmlspecialchars($text) . '</textarea>';

Keywords

PHP database textarea editing storage

Related Questions