What is the purpose of using the input type=number in PHP for database updates?

When updating a database using PHP, it is important to ensure that only numerical values are accepted for certain fields to prevent SQL injection attacks and maintain data integrity. By using the input type=number in HTML forms, we can restrict user input to only numeric values, making it easier to validate and sanitize the data before updating the database. 

// Example code snippet for updating a database field with a numeric value
$number = $_POST['number'];

// Validate and sanitize the input
$number = filter_var($number, FILTER_VALIDATE_INT);

// Update the database with the sanitized numeric value
$query = "UPDATE table SET numeric_field = :number WHERE id = :id";
$stmt = $pdo->prepare($query);
$stmt->bindParam(':number', $number, PDO::PARAM_INT);
$stmt->bindParam(':id', $id, PDO::PARAM_INT);
$stmt->execute();

Keywords

input type=number PHP database updates form submission data validation

Related Questions