PHP and MySQL with MySQLi: Example Application (Part 8/9)

Official site

Twitter

[oldguyable]

i reckon your videos are the best on youtube.

[DigiHatrix]

Great tutorial. I learned a few tricks. But I'm having a hell of a time trying to keep up with you. haha. I have to pause to a few times to keep up.

[mustafaujjainwala]

XSS can be performed on any of the 3 inputs, since you are only applying trim() function and not the escape() function you created.One more thing, while displaying the records there was no need for applying escape() function.

[giannizamora]

GUYS!!! READ!! if your are working on php 5.4 and up (mid 2014 and beyond) The word escape cannot be called as a function. If you follow his exact syntax, go back and change all the words (escape to esc) 

[loltanios]

Thank you for this series. You explain things super well and are thorough too.

[jayeshpalshikar]

Perfect! This is what I was looking for! Other resources have been simply confusing, but your explanations are just what I needed!

[Andris_Briedis]

Tip for Sublime Text.
Ctrl+Shift+D "clone" line with cursor, or selected area.

[SergiuNiculas]

Could you make another example involving a datagrid with the add/edit/delete controls? Thanks.

[Houaha]

when displaying the results in the table it will not display information when I have the escape() in it, without them it works fine, with it it stops giving my browser code after the first <td> tag

[dpuk]

Great tutorial, Thanks. Can you tell me how to enter a manual date as an entry as apposed to now() ?

[IamMuhammadHasan]

Please Sir make a series on  this MYSQLi in non OOP way in Procedural form .

Thanks

[jeremiedejonghe]

What to do with names the have characters like: é, è, ..? Because they don't show in my html table, but they do in the database.

[Doubleolseven]

I guess for three records database, this is it. How would you do a real database example, like 3... hundred records? What mechanism to retrieve a sequence- say 10 at once instead of all database, but still retain scroll through database length? Beautiful introductory lecture, thank you for posting it.

[RioStefanus]

i want to ask...if we use bind param is it safe enough from sql injection? did we must use real escape string too, to prevent from sql injection, , , ,

[iotanb]

What is the reason for the added file for security if there's mysqli_real_escape_string built in function that does it for you?

[zaboomafia]

Excellent tutorial. Thank you for the user considerations as well. trim is very useful because sometimes users will enter a space before entering their name in a form and if I need to sort the names it will be out of order because of the beginning space in the database.

[xforkhandlesx]

Thanks so much i have been trying to get my head around mysqli for a while to upgrade my programs and this has really helped, Thanks again Alex!

[MC-jxij]

I had to remove the die method at the last if statement. Everytime I hit the submit button my page was in blank. When I removed it I saw my table update dynamically, is the die() method needed in a 100%  in the development of this type of applications? 

[nicholassteains]

What is the code that is supposed to be in the connect.php file?

[xmx]

Awesomeee, thank you Alex love all your tutorials!