PHP pass value of checkbox to query

Question

Hello so I have this form with 3 checkbox:

<form action="send.php">
<input type="checkbox" name="txt_group" value="CID">CID
<input type="checkbox" name="txt_group" value="OSDS">OSDS  
<input type="checkbox" name="txt_group" value="SGO">SGO
<input type="submit">
</form>

And in my send.php I have this code:

$stmt = $dbc->query("SELECT * FROM tblcontactlist WHERE contactGroup=:cgroup");
$stmt->bindParam(':cgroup', $_POST['txt_group']);
$stmt->execute();

I think that if I check only 1 checkbox, this will work. But what if I select 2-3 checkbox? Will this query still work?

1. You have to prepare your query 2. Are you sure you didn't wanted radio buttons ? — Rizier123
– Rizier123, Commented Jun 11, 2015 at 3:59

Sougata Bose · Accepted Answer · 2015-06-11 04:13:44Z

4

You cant have same name for multiple inputs if it is not an array, else they will be overwritten by the last one. Try with -

<form action="send.php">
<input type="checkbox" name="txt_group[]" value="CID">CID
<input type="checkbox" name="txt_group[]" value="OSDS">OSDS  
<input type="checkbox" name="txt_group[]" value="SGO">SGO
<input type="submit">
</form>

With php an example query will be -

$values = implode("','", $_POST['txt_group']);
$values = $mysqli->real_escape_string($values);
"SELECT * FROM tblcontactlist WHERE contactGroup IN ('" . values . "')"

edited Jun 11, 2015 at 4:13

answered Jun 11, 2015 at 3:59

Sougata Bose

31.8k8 gold badges52 silver badges89 bronze badges

Sign up to request clarification or add additional context in comments.

11 Comments

Rizier123 Over a year ago

OP already uses PDO and now you make the code wide open for SQL-Injection.

Rizier123 Over a year ago

And now you are writing code where you don't even know what it's doing

wobsoriano Over a year ago

Sir you should use prepare not query

Rizier123 Over a year ago

@b0s3 Now you removed the code, why? Because it's completely wrong and invalid ?!

wobsoriano Over a year ago

@Rizier123 Can you make your own answer then?

|

Gary Liu · Accepted Answer · 2015-06-11 03:59:06Z

2

change the input name to array

<input type="checkbox" name="txt_group[]" value="CID">CID

then $_POST['txt_group'] get an array list of you checked

answered Jun 11, 2015 at 3:59

Gary Liu

13.9k1 gold badge21 silver badges33 bronze badges

Comments

Lal krishnan S L · Accepted Answer · 2015-06-11 03:59:17Z

1

On your code you are given same name for all checkbox like this

<input type="checkbox" name="txt_group" value="CID">CID

Try to change name as array like

<input type="checkbox" name="txt_group[]" value="CID">CID
<input type="checkbox" name="txt_group[]" value="OSDS">OSDS  
<input type="checkbox" name="txt_group[]" value="SGO">SGO

and print it on server side using

print_r($_POST['txt_group']);

answered Jun 11, 2015 at 3:59

Lal krishnan S L

1,7451 gold badge16 silver badges33 bronze badges

Comments

Glenn John Ogapong · Accepted Answer · 2015-06-11 05:49:19Z

0

yes, a square bracket for the variable name is necessary if you are to post values as an array.. this name="text_group[]" is correct ..

answered Jun 11, 2015 at 5:49

Glenn John Ogapong

511 silver badge3 bronze badges

Collectives™ on Stack Overflow

PHP pass value of checkbox to query

4 Answers 4

11 Comments

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

11 Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related