Can some one point me in the right direction/website here
Is there a way in PHP how you can update a particular table dynamically by comparing the field name from the FORM and the column_name from the database.
e.g
INPUT name="email_address"
and
Database Column name is email_address
I found something but is not so flexible in my opinion...
I have something similar in place and it's really stable.
All you have to do is to get the coloumns from your table, and generate your input fields dynamically Then, when it's posted back, implode everything, into a string. Check if the coloumn names received matches the ones in your table and implode also the values. Add_slashes and escape any quotes or other possible sql injection characters.
The following code is the one I use for a MASSIVE project/s.
$postvars = $_POST;
$q = "replace into `".$opertable."`
(
`".(implode('`,`',(remove__v(array_keys($postvars)))))."`)
values
(
'".(implode('\',\'',$postvars))."')";
remove__v removes some validation techniques and submit buttons etc with the function below
function removeObj($array) {
foreach($array as $key => $value) {
if (substr_count($key,'obj__')) unset($array[$key]);
}
return $array;
}
all my input buttons are named as obj__*
Hope you get the idea.
It should be possible to just get they key from the POST super-global, but consider the security risks involved. Remember that the form is being submitted by your user, he could easily create a fake input field called rights, and give himself administrator rights!
If you still want to go with it, the solution is simple. Loop over post, getting the key and value and appending it to the SQL query; as such:
$sql = "UPDATE user SET ";
foreach($_POST as $key => $value)
$sql .= $key . " = " . $value . ',';
$sql = substr($sql,0,-1); //Remove the last comma
