24 | Selecting Data Using PHP From Your Website! | 2023 | Learn PHP Full Course For Beginners

[@Dani_Krossing]

Sorry about the re-upload! 🙂 I had accidentally left out a extremely important security step in the last upload, where we forgot to sanitize the data before outputting it, using htmlspecialchars(). This step is important enough that I believe a re-upload is necessary, so I have re-recorded the entire last part of this video. Thank you @Graham Ince for bringing this to my attention.

[@edunjobiemmanuel4200]

It's all good. Thanks for all you do. I need you to help make video on highlight of basic things to learn in Node.js and python as a developer. Thanks.

[@保羅狄拉克]

Thank you, your work is much appreciated.

[@ShootYourBricks]

Thanks for reuploading! Hopefully you didn't loose too many views because of it

[@sammygitongar9262]

The amount of knowledge one can access on KZbin due to teachers like you is ridiculous. Keep up the good work.

[@phpcoderforever]

if you complete this course and add security one it will be the best one I have ever seen in youtube.

[@odiseevansyomi1823]

I'm watching this tutorial to understand how database content is projected to users on a website, and I must admit, this is quite helpful. Thanks a lot, Dani!!

[@Jensees901]

This course is the best one on programming I've ever seen on KZbin. Thank you so much for your work! Thanks due to this course I truely understand PHP and can build things on my own.

[@akashgola2153]

Dani makes it look easy pisy .

[@ayoubb1370]

you are a life saver :)

[@adnanefcb8]

emiliano martinez

[@marthiio47]

Good video. Thank you for doing this.

[@tomfreedom3259]

Terrific! Thanks!

[@kasunkumarasinghe6365]

Another wonderful lesson. I am doing my project using PDO method with your guide videos. One small thing Dani, at 14:28 (line 24 in search.php) shouldn't it be "header("Location: index.php");" since we are in same folder....?

[@Dani_Krossing]

Yes you are correct 🙂 a typo on my end

[@skikso]

Nice video❤.... Sir can you just make a video of crud operation + join method. Because i was asked this question in an interview.

[@ClashRoyale-pt9zj]

Even when we are echoing out data from inside our database (which is intended to already have been stored after due sanitizing), is it still necessary to wrap up this data with escaping functions such htmlspecialchars?

[@johnnyhermes]

Hello Dani, Once again a great tutorial that took my php/mySQL skills to another level..Thank you for that. When I try to run the code I get an error "Warning: Undefined array key "comments_text" in C:\Program Files\Ampps\www\test\search.php on line 51" The name in MySQL table are correct and the code is the same as yours. I realy hope you could help me on this.

[@johnnyhermes]

AAAAAAAAARG..... I put comments (//Mycomments) in that particular row of code. Problem is resolved.

[@DaedalusDM]

Hey Dani. Excellent video as always. Thank you for all of these. A snag I've run into with this particular lesson is that I've tried to apply these principles to a slightly different scenario and I've messed it up somewhere along the line. I'm trying to simply populate a table with all available info from MySQL using this method, but with instead using a SELECT * approach. The problem is that I am following this almost exactly, but when I try echo data I receive a repetition of ArrayArrayArray as opposed to the actual contents of table columns. Am I misunderstanding associative arrays altogether and am trying to approach printing out info with the wrong solution, or what could be the problem that causes this?

[@Dani_Krossing]

Getting "ArrayArrayArray" happens when you try to echo out an array, since we receive the data as arrays. Instead when selecting data from a database and echoing it directly, you should loop the array content first, and then inside the loop echo it out. 🙂 Here is an example, where you output the data into a table:

[@DaedalusDM]

@@Dani_Krossing You're a star, thank you.

[@ruudkorunka]

Is it possible to select (copy) a new row of data from the database automatically into an html table, after the user has clicked the submit button?

[@nhatanh4410]

Hi Krossing, I dont know if you can share with us the CSS files that you use in this video, just to make it easier to follow and code the same in the video!

[@Dani_Krossing]

I can see you are a member, so there should be a link for you under the benefits you receive as a member 🙂

[@nhatanh4410]

@@Dani_Krossing I still cannot find it... I am so sorry if I bother you, but the materials you made are really great, and I hope to access it. But I cannot find the link elsewhere to the materials with a KZbin membership.

[@HaiderAli-zo9ff]

Dani Sir please upload next video

[@AustinHaynes-qo3fo]

I have a question which may be stupid, but how does the button on the form know which page to take the user to without setting an

[@Dani_Krossing]

In forms we use the “action” attribute instead, since we are redirecting the user to a page, within our own website, and because it uses a http request instead of simply linking. 🙂 the “href” attribute can be used for redirecting users outside the website as well.

[@AgenceWebSigma]

in the first episodes of this playlist, you used htmlspecialchars to sanitize inputs from the user and now you are using this method for outputs. I think the data is already sanitized. Why sanitize it when outputting? Can you explain to me please because I am a little bit confused :) advanced Thanks.

[@Dani_Krossing]

It’s been a while since I saw those videos, but if I remember correctly, we didn’t store the data in a database in those first videos 🙂 Htmlspecialchar is used when outputting data into the browser, which is why I used it then 🙂 where as the other filter methods are used when “doing something with the data”.

[@AgenceWebSigma]

@@Dani_Krossing Thanks a lot for your kindness and prompt reply and it's understood well :) just one last question: can hackers or others intercept data when exporting it from a database before displaying on the website, therefore it's mandatory to sanitize it?

[@Dani_Krossing]

The reason we use htmlspecialchars before outputting, is because it is possible to write code into HTML input fields, and run it in your browser. And we don’t want that, since it allows hackers to run scripts in our website. 🙂 And yes, the code they inject into the inputs, can also get sent into the database, which stores it there until we run it in the website.

[@AgenceWebSigma]

@@Dani_Krossing Thanks again for your prompt reply and explantation :) you are really the best in YT.

[@drewplayz3765]

hey thanks for the great teaching but I'm sort of finding it hard as every 2 min you are using a new function which I haven't heard before in the tutorials. How do I learn those.

[@Dani_Krossing]

You just gotta repeat them again and again... Until they stick 🙂

[@KAREKINFPV]

I love your content but I feel like this should have been 23 and 23 should have been 24. :-)