39: Protect your database against SQL injection using MySQLi | PHP tutorial | Learn PHP programming

Learn to protect your database against SQL injection using MySQLi. Today we will learn how to protect our database from SQL injection using MySQLi. The MySQLi function is called mysqli_real_escape_string(), and helps escape any form text that the user passes on from the website, in case they try to inject code into our database.

In the next episode we will learn how to interact with our database using Prepared Statements, which is a preferred method of interacting with databases, since it is safer and in some cases faster.

➤ GET ACCESS TO MY LESSON MATERIAL HERE!

First of all, thank you for all the support you have given me!

I am really glad to have such an awesome community on my channel. It motivates me to continue creating and uploading content! So thank you!

I am now using Patreon to share improved and updated lesson material, and for a small fee you can access all the material. I have worked hard, and done my best to help you understand what I teach.

I hope you will find it helpful :)

[MohiyuddinShaikh]

I do not understand how people dislike this video. It delivers what it promises and it does so amazingly.

[ProgoriPro]

Wow man, you are gold! I can't believe there is so few views and subs on this channel. Thanks a lot for all your tutorials!

[mera]

You are a God-send! Thank you for your awesome tutorials; they have helped me soooo much in school with my assignments! Thank you for being so detailed!

[dinhphuctran]

thanks a lot man, hope you still keep making tutorial videos like this, I have learnt a lot

[NathalieLega]

I’ve learned a lot from your tutorial. Thank you so much.

[c.fiddler]

Awesome vid’s, learning quite a few tricks. Thanks for sharing your generous expertise

[gulshankhurana]

keep going man!! doing great job..!! love your tutorials

[samueltorres]

Super good video you explain the concept so well that anyone can understand thank you

[simsolchannel]

Thank you so much teacher, I would like this lesson ...God bless you..

[sajad]

thank you for nice tut.
i am waiting for another advance php tutorials 😊😊

[repalda]

gonna apply that into my web based system, thanks sir

[shaikabdullah]

thank you really good and worked for me thanks

[suryateja]

Nice bro giving good information for users

[suggestedbox]

i always used that code, but dont know what is that purpose. now i know thanks man :)

[iqbalibrahim]

The first video I found on how to protect database from sql injection, usually other videos don't tell us about this, really awesome man

[lghtggd]

Question: for a bind_Param statement would I add in the escape strings with each variable the same way?

[shayantsital]

if you can can you make a video about session hijacking prevention

[CountingSheepsTonight]

Great video! BTW you can also use the htmlentities() function which can also return a code as a string

[pianoLee-sxdx]

How do you use mysqli_real_escape_string for arrays?

[nitjuus]

May I know your sublime color scheme? Thanks! great video anyway