To update a database record in PHP, first connect using PDO or MySQLi, then use prepared statements to execute a secure SQL UPDATE query. Example: $pdo = new PDO("mysql:host=localhost;dbname=your_database", $username, $password); $sql = "UPDATE users SET email = :email WHERE id = :id"; $stmt = $pdo->prepare($sql); $stmt->bindParam(':email', $email); $stmt->bindParam(':id', $id, PDO::PARAM_INT); $email = 'newemail@example.com'; $id = 5; $stmt->execute(); For multiple fields: include all in SET clause, bind each parameter. Always validate input and check affected rows with rowCount().

To update a record in a database using PHP, you need to connect to the database, create a SQL UPDATE query, and execute it safely. The most important part is to prevent SQL injection, so always use prepared statements. Here's how to do it properly.

Connect to the Database

Use PDO or MySQLi to establish a secure connection. PDO is recommended for its flexibility and support for multiple databases.

$host = 'localhost';
$dbname = 'your_database';
$username = 'your_username';
$password = 'your_password';

try {
??$pdo = new PDO("mysql:host=$host;dbname=$dbname", $username, $password);
??$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
} catch (PDOException $e) {
??die("Connection failed: " . $e->getMessage());
}

Create and Execute the UPDATE Query

Use a prepared statement to safely update data. Never concatenate user input directly into the query.

$sql = "UPDATE users SET email = :email WHERE id = :id";
$stmt = $pdo->prepare($sql);
$stmt->bindParam(':email', $email);
$stmt->bindParam(':id', $id, PDO::PARAM_INT);

$email = 'newemail@example.com';
$id = 5;

if ($stmt->execute()) {
??echo "Record updated successfully";
} else {
??echo "Update failed";
}

Handle Multiple Fields

You can update more than one column at a time. Just include all fields in the SET clause and bind each parameter.

$sql = "UPDATE users SET name = :name, email = :email WHERE id = :id";
$stmt = $pdo->prepare($sql);
$stmt->bindParam(':name', $name);
$stmt->bindParam(':email', $email);
$stmt->bindParam(':id', $id, PDO::PARAM_INT);

$name = 'John Doe';
$email = 'john@example.com';
$id = 5;
$stmt->execute();

Always validate and sanitize input before using it in queries, even with prepared statements. Check if the record exists after update if needed, using rowCount() to see how many rows were affected.

Basically just connect, prepare, bind, execute — and keep it secure.

The above is the detailed content of How to update a record in a database with PHP?. For more information, please follow other related articles on the PHP Chinese website!