Home/ Questions/Q 8944311
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-15T11:59:37+00:00

My php code returns some value, I am trying to insert in database. $string

  • 0

My php code returns some value, I am trying to insert in database.

$string =  '1,here,Skincare composition against free radicals'; //this is returned

'(insert into import (S.No,Name,Title)) values ($string)'

Need to convert that string in proper format to insert in db

'1','here','Skincare composition against free radicals'  //This is expected

implode should do it? But I dont know how?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    try,

    $string =  "1,here,Skincare composition against free radicals";
$varList = explode(",", $string);
$newQuery = "INSERT INTO `import` (`S.No`,`Name`,`Title`) VALUES ('" . $varList[0] . "','" . $varList[1] . "','" . $varList[2] . "')";

    but the query is vulnerable with SQL Injection, please read the article below to how learn to protect from it,

    Other Source

    • 0