Sql query for insert multiple array values into database

Question

I'm getting array value from cart table and I want to insert cart array value into my order table but the problem I was facing is only last array value only inserting into my database but I want to insert all cart value into my order table.

/*This is the form page I was getting cart value*/
<form>
<input type="text" name="cid[]" value="1">
<input type="text" name="pid[]" value="2">
<input type="text" name="quantity[]" value="3">
<input type="text" name="total[]" value="5">
</form>

/*Once the form is submited the action comes to this php page*/

<?php 
$cid = $_POST['cid'];
$pid = $_POST['pid'];
$quantity = $_POST['quantity'];
$total = $_POST['cid'];

$insertquery = "INSERT INTO orders(cid,pid,quantity,total) VALUES('$cid','$pid','$quantity','$total')";

?>


/*After excution of this code only inseting the last value, not inserting the all value */

@ u_mulder. But I'm getting form value from different name so how can I iterate it. — Saravanan Sankar
– Saravanan Sankar, Commented Sep 23, 2018 at 19:55
Your script is wide open to SQL Injection Attack Even if you are escaping inputs, its not safe! Use prepared parameterized statements in either the MYSQLI_ or PDO API's — RiggsFolly
– RiggsFolly, Commented Sep 23, 2018 at 21:29

Yolo · Accepted Answer · 2018-09-23 22:03:44Z

1

Since your form elements are arrays [], loop over them like this:

$rowCount = count($_POST['cid']);

for($=0; $i < $rowCount; $i++) {

    $cid = $_POST['cid'][$i];
    $pid = $_POST['pid'][$i];
    $quantity = $_POST['quantity'][$i];
    $total = $_POST['total'][$i];

    // ...

}

edited Sep 23, 2018 at 22:03

answered Sep 23, 2018 at 20:42

Yolo

1,5791 gold badge11 silver badges16 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

RiggsFolly Over a year ago

Your script is wide open to SQL Injection Attack Even if you are escaping inputs, its not safe! Use prepared parameterized statements in either the MYSQLI_ or PDO API's

RiggsFolly Over a year ago

And it would run faster using a Prepare Once and execute Many method

Yolo Over a year ago

@RiggsFolly thx for reminding me to always point out injection problems if i copy/paste non-safe code from a beginner. Changed it.. IMO talking about prepare/execute in your follow up comment is off topic. Correct me if i am wrong :)

Collectives™ on Stack Overflow

Sql query for insert multiple array values into database

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related