PHP MySQL Insert Data

PHP MySQL Insert Data

Below is a clear, step-by-step guide to PHP MySQL Insert Data, with real examples, security best practices, and error handling.

Database & Table Example

Assume you have this MySQL table:

PHP–MySQL Connection (MySQLi)

Simple INSERT Query (Not Recommended for Production)

Problem: Vulnerable to SQL Injection

Secure Method (Prepared Statements – Recommended)

<?php
$stmt = $conn->prepare(
"INSERT INTO users (name, email, age) VALUES (?, ?, ?)"
);

$stmt->bind_param("ssi", $name, $email, $age);

$name = "Rahul";
$email = "rahul@gmail.com";
$age = 22;

$stmt->execute();

echo "Data inserted safely";

$stmt->close();
$conn->close();
?>

<?php

$stmt = $conn->prepare(

"INSERT INTO users (name, email, age) VALUES (?, ?, ?)"

);

$stmt->bind_param("ssi", $name, $email, $age);

$name = "Rahul";

$email = "rahul@gmail.com";

$age = 22;

$stmt->execute();

echo "Data inserted safely";

$stmt->close();

$conn->close();

Why Prepared Statements?

Prevents SQL Injection
Faster for repeated inserts
Industry best practice

Insert Data from HTML Form

HTML Form

PHP Code

<?php
if (isset($_POST['save'])) {
$stmt = $conn->prepare(
"INSERT INTO users (name, email, age) VALUES (?, ?, ?)"
);

$stmt->bind_param(
"ssi",
$_POST['name'],
$_POST['email'],
$_POST['age']
);

if ($stmt->execute()) {
echo "User added successfully";
} else {
echo "Insert failed";
}

$stmt->close();
}
?>

<?php

if (isset($_POST['save'])) {

$stmt = $conn->prepare(

"INSERT INTO users (name, email, age) VALUES (?, ?, ?)"

);

$stmt->bind_param(

"ssi",

$_POST['name'],

$_POST['email'],

$_POST['age']

);

if ($stmt->execute()) {

echo "User added successfully";

} else {

echo "Insert failed";

}

$stmt->close();

}

Insert Multiple Records (Loop)

<?php

$users = [
    ["Ankit", "ankit@gmail.com", 24],
    ["Neha", "neha@gmail.com", 21],
    ["Ravi", "ravi@gmail.com", 26]
];

$stmt = $conn->prepare(
    "INSERT INTO users (name, email, age) VALUES (?, ?, ?)"
);

foreach ($users as $u) {
    $stmt->bind_param("ssi", $u[0], $u[1], $u[2]);
    $stmt->execute();
}

echo "Multiple records inserted";

?>

<?php

$users = [

["Ankit", "ankit@gmail.com", 24],

["Neha", "neha@gmail.com", 21],

["Ravi", "ravi@gmail.com", 26]

];

$stmt = $conn->prepare(

"INSERT INTO users (name, email, age) VALUES (?, ?, ?)"

);

foreach ($users as $u) {

$stmt->bind_param("ssi", $u[0], $u[1], $u[2]);

$stmt->execute();

}

echo "Multiple records inserted";

Common Errors & Fixes

Error	Reason	Fix
`Access denied`	Wrong DB credentials	Check username/password
`Table doesn't exist`	Table name wrong	Verify table
`Undefined index`	Form field missing	Check input names
`SQL Injection risk`	Raw queries	Use prepared statements

Best Practices

Always use prepared statements
Validate & sanitize user input
Handle errors properly
Close database connection

PHP MySQL Insert Data