What is the purpose of the function getuserimage in the PHP code provided?

The purpose of the function getuserimage in the provided PHP code is to retrieve the image associated with a user based on their user ID. However, the current implementation is vulnerable to SQL injection attacks as it directly concatenates user input into the SQL query. To solve this issue, we need to use prepared statements to safely handle user input in SQL queries. 

function getuserimage($userid, $conn) {
    $stmt = $conn->prepare("SELECT image FROM users WHERE id = ?");
    $stmt->bind_param("i", $userid);
    $stmt->execute();
    $result = $stmt->get_result();
    
    if ($result->num_rows > 0) {
        $row = $result->fetch_assoc();
        return $row['image'];
    }
    
    return null;
}

Keywords

function getuserimage PHP code purpose

Related Questions