chapagain / crud-php-simple

Simple Add, Edit, Delete & Display in PHP & MySQL

Simple Create, Read, Update, Delete (CRUD) in PHP & MySQL

A simple and basic system to add, edit, delete and view using PHP and MySQL.

Blog Article: Very simple add, edit, delete, view in PHP & MySQL

SQL script to create database and tables is present in database.sql file.

crud-php-simple's Issues

"update" with "blank" entry = Full of errors.

You do an entry, no problem
You update and entry, no problem
During update, you leave the entry blank and submit = An ugly page with full of errors. Try it. Multiple people already mentioned about this but I didn't see the answer on your blog posts.

You have another CRUD code on github. That one also gives the same error.

Please let me know if you know how to fix this. Thanks a lot.

SQL Injection

The way you are concatenating the input from the user into the SQL statements opens you up to a SQLInjection attack. If an attacker finds a SQL Injection they can do anything to the database that the user you're connected to the database as has. This includes extracting the entire database of data or even lad a shell on the database.

for more information visit: https://www.owasp.org/index.php/SQL_Injection. it is an open source community to bring awareness of application security to the masses.

Also the attack tool favored by attackers is SQLMap: http://sqlmap.org/

You can modify your code to use parameterized inputs into the SQL Statement:
http://php.net/manual/en/pdo.prepared-statements.php

nice

Ok

Good Job

Good Job :)

Fields empty?

How is it possible if I filled the fields, I get the message the fields are empty?