Foreach with PHP

Question

I have a simple form, e.g:

HTML:

Your favorite food?
 Pizza: <input type="checkbox" name="food[]" value="0" />
 Beef: <input type="checkbox" name="food[]" value="1" />
 Eggs: <input type="checkbox" name="food[]" value="2" />

Your Email?
  <input type="text" name="email" />

I could get the result via foreach():

foreach($_POST['food'] as $food) { 
  echo $food;
}

Where I should put the Insertion query when the user choose more than one food:


$query = $DB->insert("INSERT INTO table VALUES('NULL','$food','$email')");

BS:

I should insert one row even if the user choose 3 foods. The food field accept more than one value

example:

user 1:

email: david@gmail.com
food: 1

user 2:

email: jack@gmail.com
food: 0 1 2

Um, within the loop? Not sure what your question is. Be careful to avoid [SQL injection](http://stackoverflow.com/questions/601300/what-is-sql-injection) by the way — Pekka, Feb 26 '11 at 10:01
Please consider using mysql_real_escape_string or PDO with prepared statements. — Mark Byers, Feb 26 '11 at 10:02
@Pekka + @Mark Byers : yes this is not the real code, it's an example :) I'm already using: using mysql_real_escape_string — Cheerio, Feb 26 '11 at 10:04
Well then try to batch the inserts like delphist suggested, to avoid one request per loop iteration. — Nick Weaver, Feb 26 '11 at 10:10

Gaurav · Accepted Answer · 2011-02-26T10:15:31.533

4

You should put this query in foreach if you want to save each record in new row.

$query = array();
foreach($_POST['food'] as $food) { 
  $query[] = "('NULL','$food','$email')";
}
$query = $DB->insert("INSERT INTO table VALUES ".implode(',', $query).");

or if you want to store all foods in single row then you can use as

$foods = implode(',', $_POST['food']);
$query = $DB->insert("INSERT INTO table VALUES('NULL','$foods','$email')");

This will save foods in format of food1,food2,food3

edited Feb 26 '11 at 10:15

answered Feb 26 '11 at 10:02

Gaurav

28,447
8
50
80

1

it would make 3 queries for `food1,food2,food3` – delphist Feb 26 '11 at 10:05
`INSERT INTO table VALUES('NULL','food1','email@example.com')`, `INSERT INTO table VALUES('NULL','food2','email@example.com')`, `INSERT INTO table VALUES('NULL','food3','email@example.com')` – delphist Feb 26 '11 at 10:08
I have this code in the begin `foreach($_POST as $key => $value){ $_POST[$key] = mysql_real_escape_string(strip_tags($value)); } ` and it avoid the new code: `$foods = implode(',', $_POST['job']);` – Cheerio Feb 26 '11 at 10:30
string_tags works with string not array. And in foreach you were is using it with array. was it working. You can use mysql_real_escape_string(strip_tags(implode(',', $_POST['job']))); – Gaurav Feb 26 '11 at 10:38
I have a lot of fields :) so I have a foreach in the begin with mysql_real_escape_string for the all fields as I mentioned in the comment above – Cheerio Feb 26 '11 at 11:50

score 0 · Answer 2 · answered Feb 26 '11 at 10:02

0

$query_body = array();
foreach($_POST['food'] as $v) { 
  $query_body[] = '(\'NULL\', \''.addslashes($v).'\', \''.addslashes($email).'\')';
}

if(count($query_body)) {
  $query = 'INSERT INTO table VALUES '.implode(',', $query_body);
}

answered Feb 26 '11 at 10:02

delphist

4,409
1
22
22

1

should be implode(',', $query_body) not implode($query_body, ', ') – Gaurav Feb 26 '11 at 10:04
with this code i get more than one row :) I should get insert one row with one email – Cheerio Feb 26 '11 at 10:22

Foreach with PHP

2 Answers2