Reply to thread

Message

<blockquote data-quote="RastaLulz" data-source="post: 45927" data-attributes="member: 1">MySQLi Info:<a href="http://php.net/manual/en/book.mysqli.php" target="_blank">http://php.net/manual/en/book.mysqli.php</a>Today I'll show you the basics of MySQLi, and how to use it. I'm showing you this because a lot of you still use the old mysql functions. That's bad because they really are outdated, less secure, and less efficient.Connect to MySQL database:[PHP]&lt;?php$_CONFIG['mysql']['host'] = 'localhost';$_CONFIG['mysql']['user'] = 'root';$_CONFIG['mysql']['pass'] = 'pass';$_CONFIG['mysql']['db']&nbsp; = 'db';$db = new mysqli($_CONFIG['mysql']['host'], $_CONFIG['mysql']['user'], $_CONFIG['mysql']['pass'], $_CONFIG['mysql']['db']);[/PHP]Execute a query:[PHP]$username = 'RastaLulz';//update info$db-&gt;query(&quot;UPDATE users SET email = 'booty@lulz.com' WHERE name = '&quot;.$username.&quot;'&quot;);//get info$getUserInfo = $db-&gt;query(&quot;SELECT * FROM users WHERE name = '&quot;.$username.&quot;'&quot;);[/PHP]Get data:[PHP]if($getUserInfo-&gt;num_rows &gt; 0) {&nbsp; $userInfo = $getUserInfo-&gt;fetch_object();&nbsp; echo $user.&quot;'s emails is &lt;strong&gt;&quot;.$userInfo-&gt;email.'&lt;/strong&gt;!';}else{&nbsp; echo 'Sorry, but that username could not be found.';}[/PHP]Stop SQL injections:[PHP]$pass = '123456'; $email = 'null@null.net'; $id = '21';$secure = $db-&gt;prepare('UPDATE users SET password = ?, email = ? WHERE id = ?');$secure-&gt;bind_param('ssi', $pass, $email, $id); //ssi stands for string, string, integer - based on the question marks$secure-&gt;execute();[/PHP]If you have any questions, feel free to ask below.</blockquote>

[QUOTE="RastaLulz, post: 45927, member: 1"] MySQLi Info: [URL]http://php.net/manual/en/book.mysqli.php[/URL] Today I'll show you the basics of MySQLi, and how to use it. I'm showing you this because a lot of you still use the old mysql functions. That's bad because they really are outdated, less secure, and less efficient. Connect to MySQL database: [PHP]<?php $_CONFIG['mysql']['host'] = 'localhost'; $_CONFIG['mysql']['user'] = 'root'; $_CONFIG['mysql']['pass'] = 'pass'; $_CONFIG['mysql']['db'] = 'db'; $db = new mysqli($_CONFIG['mysql']['host'], $_CONFIG['mysql']['user'], $_CONFIG['mysql']['pass'], $_CONFIG['mysql']['db']);[/PHP] Execute a query: [PHP]$username = 'RastaLulz'; //update info $db->query("UPDATE users SET email = 'booty@lulz.com' WHERE name = '".$username."'"); //get info $getUserInfo = $db->query("SELECT * FROM users WHERE name = '".$username."'");[/PHP] Get data: [PHP]if($getUserInfo->num_rows > 0) { $userInfo = $getUserInfo->fetch_object(); echo $user."'s emails is ".$userInfo->email.'!'; }else{ echo 'Sorry, but that username could not be found.'; }[/PHP] Stop SQL injections: [PHP]$pass = '123456'; $email = 'null@null.net'; $id = '21'; $secure = $db->prepare('UPDATE users SET password = ?, email = ? WHERE id = ?'); $secure->bind_param('ssi', $pass, $email, $id); //ssi stands for string, string, integer - based on the question marks $secure->execute();[/PHP] If you have any questions, feel free to ask below. [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members