What potential issues or errors could arise when trying to add a name to the database in the given PHP script?

One potential issue that could arise when trying to add a name to the database in the given PHP script is not properly sanitizing user input, which could lead to SQL injection attacks. To solve this issue, you should use prepared statements with parameterized queries to securely insert data into the database. 

// Issue: Not sanitizing user input, leading to potential SQL injection attacks
// Solution: Use prepared statements with parameterized queries

// Get the name from user input
$name = $_POST['name'];

// Create a database connection
$pdo = new PDO('mysql:host=localhost;dbname=your_database', 'username', 'password');

// Prepare the SQL query using a parameterized query
$stmt = $pdo->prepare("INSERT INTO names (name) VALUES (:name)");
$stmt->bindParam(':name', $name);

// Execute the query
$stmt->execute();

// Close the database connection
$pdo = null;

Keywords

SQL injection database connection MySQL error handling data validation

Related Questions