{"id":5745,"date":"2019-02-04T06:05:57","date_gmt":"2019-02-04T06:05:57","guid":{"rendered":"https:\/\/www.devopsschool.com\/blog\/?p=5745"},"modified":"2022-04-13T15:56:38","modified_gmt":"2022-04-13T15:56:38","slug":"how-to-use-pdo-to-insert-data-into-the-database","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/blog\/how-to-use-pdo-to-insert-data-into-the-database\/","title":{"rendered":"How to use PDO to insert data into the database?"},"content":{"rendered":"

\"\"<\/a><\/p>\n

The SQL code for the users table:<\/strong><\/p>\n

[code language=”sql”]
\nCREATE TABLE IF NOT EXISTS users (id int(11) NOT NULL AUTO_INCREMENT,
\nname varchar(60) DEFAULT NULL,
\nphone varchar(12) DEFAULT NULL,
\ncity varchar(60) DEFAULT NULL,
\ndate_added date DEFAULT NULL,
\nPRIMARY KEY (id)
\n)
\n[\/code]<\/p>\n

1) Write a regular SQL query but, instead of values, put named placeholders. For example:<\/strong><\/p>\n

[code language=”php”]
\n$sql = "INSERT INTO `users`(`name`, `phone`, `city`, `date_added`)
\nVALUES(:name,:phone,:city,:date)";
\n[\/code]<\/p>\n

The use of placeholders is known as prepared statements. We use prepared statements as templates that we can fill later on with actual values.
\n2) Prepare the query:<\/strong><\/p>\n

[code language=”php”]
\n$query = $dbh -> prepare($sql);
\n[\/code]<\/p>\n

3) Bind the placeholders to the variables:<\/strong><\/p>\n

[code language=”php”]
\n$query->bindParam(‘:name’,$name);
\n[\/code]<\/p>\n

You can add a third parameter which filters the data before it reaches the database:<\/strong><\/p>\n

[code language=”php”]
\n$query->bindParam(‘:name’,$name,PDO::PARAM_STR);
\n$query->bindParam(‘:phone’,$phone,PDO::PARAM_INT);
\n$query->bindParam(‘:city’,$city,PDO::PARAM_STR);
\n$query->bindParam(‘:date’,$date,PDO::PARAM_STR);
\n[\/code]<\/p>\n