<?php //Connect to Database $mysqli = mysqli_connect('host','username','password','database_name'); //object oriented style (recommended) $mysqli = new mysqli('host','username','password','database_name'); $mysqli = new mysqli('host','username','password','database_name'); //Output any connection error if ($mysqli->connect_error) { die('Error : ('. $mysqli->connect_errno .') '. $mysqli->connect_error); } //----------------------------------------------------------------- //SELECT Multiple Records as Associative array //Open a new connection to the MySQL server $mysqli = new mysqli('host','username','password','database_name'); //Output any connection error if ($mysqli->connect_error) { die('Error : ('. $mysqli->connect_errno .') '. $mysqli->connect_error); } //MySqli Select Query $results = $mysqli->query("SELECT id, product_code, product_desc, price FROM products"); print '<table border="1">'; while($row = $results->fetch_assoc()) { print '<tr>'; print '<td>'.$row["id"].'</td>'; print '<td>'.$row["product_code"].'</td>'; print '<td>'.$row["product_name"].'</td>'; print '<td>'.$row["product_desc"].'</td>'; print '<td>'.$row["price"].'</td>'; print '</tr>'; } print '</table>'; // Frees the memory associated with a result $results->free(); // close connection $mysqli->close(); //----------------------------------------------------------------- //SELECT Multiple Records as Array //Open a new connection to the MySQL server $mysqli = new mysqli('host','username','password','database_name'); //Output any connection error if ($mysqli->connect_error) { die('Error : ('. $mysqli->connect_errno .') '. $mysqli->connect_error); } //MySqli Select Query $results = $mysqli->query("SELECT id, product_code, product_desc, price FROM products"); print '<table border="1"'; while($row = $results->fetch_array()) { print '<tr>'; print '<td>'.$row["id"].'</td>'; print '<td>'.$row["product_code"].'</td>'; print '<td>'.$row["product_name"].'</td>'; print '<td>'.$row["product_desc"].'</td>'; print '<td>'.$row["price"].'</td>'; print '</tr>'; } print '</table>'; // Frees the memory associated with a result $results->free(); // close connection $mysqli->close(); //----------------------------------------------------------------- //SELECT Multiple Records as Objects //Open a new connection to the MySQL server $mysqli = new mysqli('host','username','password','database_name'); //Output any connection error if ($mysqli->connect_error) { die('Error : ('. $mysqli->connect_errno .') '. $mysqli->connect_error); } //MySqli Select Query $results = $mysqli->query("SELECT id, product_code, product_desc, price FROM products"); print '<table border="1">'; while($row = $results->fetch_object()) { print '<tr>'; print '<td>'.$row->id.'</td>'; print '<td>'.$row->product_code.'</td>'; print '<td>'.$row->product_name.'</td>'; print '<td>'.$row->product_desc.'</td>'; print '<td>'.$row->price.'</td>'; print '</tr>'; } print '</table>'; // close connection $mysqli->close(); //----------------------------------------------------------------- //SELECT Single value //Open a new connection to the MySQL server $mysqli = new mysqli('host','username','password','database_name'); //Output any connection error if ($mysqli->connect_error) { die('Error : ('. $mysqli->connect_errno .') '. $mysqli->connect_error); } //chained PHP functions $product_name = $mysqli->query("SELECT product_name FROM products WHERE id = 1")->fetch_object()->product_name; print $product_name; //output value $mysqli->close(); //----------------------------------------------------------------- //SELECT COUNT Total records of a table //Open a new connection to the MySQL server $mysqli = new mysqli('host','username','password','database_name'); //Output any connection error if ($mysqli->connect_error) { die('Error : ('. $mysqli->connect_errno .') '. $mysqli->connect_error); } //get total number of records $results = $mysqli->query("SELECT COUNT(*) FROM users"); $get_total_rows = $results->fetch_row(); //hold total records in variable $mysqli->close(); //----------------------------------------------------------------- //SELECT Using Prepared Statements $search_product = "PD1001"; //product id //create a prepared statement $query = "SELECT id, product_code, product_desc, price FROM products WHERE product_code=?"; $statement = $mysqli->prepare($query); //bind parameters for markers, where (s = string, i = integer, d = double, b = blob) $statement->bind_param('s', $search_product); //execute query $statement->execute(); //bind result variables $statement->bind_result($id, $product_code, $product_desc, $price); print '<table border="1">'; //fetch records while($statement->fetch()) { print '<tr>'; print '<td>'.$id.'</td>'; print '<td>'.$product_code.'</td>'; print '<td>'.$product_desc.'</td>'; print '<td>'.$price.'</td>'; print '</tr>'; } print '</table>'; //close connection $statement->close(); //Same query with multiple parameters: $search_ID = 1; $search_product = "PD1001"; $query = "SELECT id, product_code, product_desc, price FROM products WHERE ID=? AND product_code=?"; $statement = $mysqli->prepare($query); $statement->bind_param('is', $search_ID, $search_product); $statement->execute(); $statement->bind_result($id, $product_code, $product_desc, $price); print '<table border="1">'; while($statement->fetch()) { print '<tr>'; print '<td>'.$id.'</td>'; print '<td>'.$product_code.'</td>'; print '<td>'.$product_desc.'</td>'; print '<td>'.$price.'</td>'; print '</tr>'; } print '</table>'; //close connection $statement->close(); //----------------------------------------------------------------- //INSERT a Record //values to be inserted in database table $product_code = '"'.$mysqli->real_escape_string('P1234').'"'; $product_name = '"'.$mysqli->real_escape_string('42 inch TV').'"'; $product_price = '"'.$mysqli->real_escape_string('600').'"'; //MySqli Insert Query $insert_row = $mysqli->query("INSERT INTO products (product_code, product_name, price) VALUES($product_code, $product_name, $product_price)"); if($insert_row){ print 'Success! ID of last inserted record is : ' .$mysqli->insert_id .'<br />'; }else{ die('Error : ('. $mysqli->errno .') '. $mysqli->error); } //Prepared Statement //Prepared statements are very effective against SQL injection //values to be inserted in database table $product_code = 'P1234'; $product_name = '42 inch TV'; $product_price = '600'; $query = "INSERT INTO products (product_code, product_name, price) VALUES(?, ?, ?)"; $statement = $mysqli->prepare($query); //bind parameters for markers, where (s = string, i = integer, d = double, b = blob) $statement->bind_param('sss', $product_code, $product_name, $product_price); if($statement->execute()){ print 'Success! ID of last inserted record is : ' .$statement->insert_id .'<br />'; }else{ die('Error : ('. $mysqli->errno .') '. $mysqli->error); } $statement->close(); //----------------------------------------------------------------- //Insert Multiple Records //product 1 $product_code1 = '"'.$mysqli->real_escape_string('P1').'"'; $product_name1 = '"'.$mysqli->real_escape_string('Google Nexus').'"'; $product_price1 = '"'.$mysqli->real_escape_string('149').'"'; //product 2 $product_code2 = '"'.$mysqli->real_escape_string('P2').'"'; $product_name2 = '"'.$mysqli->real_escape_string('Apple iPad 2').'"'; $product_price2 = '"'.$mysqli->real_escape_string('217').'"'; //product 3 $product_code3 = '"'.$mysqli->real_escape_string('P3').'"'; $product_name3 = '"'.$mysqli->real_escape_string('Samsung Galaxy Note').'"'; $product_price3 = '"'.$mysqli->real_escape_string('259').'"'; //Insert multiple rows $insert = $mysqli->query("INSERT INTO products(product_code, product_name, price) VALUES ($product_code1, $product_name1, $product_price1), ($product_code2, $product_name2, $product_price2), ($product_code3, $product_name3, $product_price3)"); if($insert){ //return total inserted records using mysqli_affected_rows print 'Success! Total ' .$mysqli->affected_rows .' rows added.<br />'; }else{ die('Error : ('. $mysqli->errno .') '. $mysqli->error); } //----------------------------------------------------------------- //Update/Delete a Records //Updating and deleting records works similar way, just change to query string to MySql Update or delete //MySqli Update Query $results = $mysqli->query("UPDATE products SET product_name='52 inch TV', product_code='323343' WHERE ID=24"); //MySqli Delete Query //$results = $mysqli->query("DELETE FROM products WHERE ID=24"); if($results){ print 'Success! record updated / deleted'; }else{ print 'Error : ('. $mysqli->errno .') '. $mysqli->error; } //----------------------------------------------------------------- //Update using Prepared Statement $product_name = '52 inch TV'; $product_code = '9879798'; $find_id = 1; $statement = $mysqli->prepare("UPDATE products SET product_name=?, product_code=? WHERE ID=?"); //bind parameters for markers, where (s = string, i = integer, d = double, b = blob) $statement->bind_param('ssi', $product_name, $product_code, $find_id); $results = $statement->execute(); if($results){ print 'Success! record updated'; }else{ print 'Error : ('. $mysqli->errno .') '. $mysqli->error; } //Delete Old Records //Delete all records that is 1 day old, or specify X days records you want to delete. //MySqli Delete Query $results = $mysqli->query("DELETE FROM products WHERE added_timestamp < (NOW() - INTERVAL 1 DAY)"); if($results){ print 'Success! deleted one day old records'; }else{ print 'Error : ('. $mysqli->errno .') '. $mysqli->error; } ?>
article
Thursday, July 7, 2016
PHP MySqli Basic usage (select, insert & update)
PHP MySqli Basic usage (select, insert & update)