通过表单将数据添加到PostgreSQL。 如果变量为null / empty，则添加失败，如何防止这种情况？

Question

I'm adding data to a PostgreSQL database via a PHP form. It all feels a bit sketchy. My main concern is that; in the event of a variable being null/empty the add fails. How do I prevent this?

The simplified code is like this:

$name = $_POST['name'];
$movie = $_POST['movie'];
$query = "INSERT INTO data.base(name, movie) VALUES('" . $name . "', '" . $movie . "')";
$result = pg_query($query);
if ( $result ) {
    echo 'Thanks';
} else {
    echo 'Error';
}

So if the $movie variable is null/empty the whole add fails.

I could do something like this I suppose:

$name = $_POST['name'];
if ( ! $name ) {
    $name = '0';
}

But I'd rather keep the cell empty as opposed to inserting false data.

Any help would be much appreciated.

Answer 1

PHP 7+ is required for my solution.

If your name and movie column can be null, and devault value is null you can do something like this:

$name = $_POST['name'] ?? null;
$movie = $_POST['movie'] ?? null;
$query = "INSERT INTO data.base(name, movie) VALUES('" . $name . "', '" . $movie . "')";
$result = pg_query($query);
if ( $result ) {
    echo 'Thanks';
} else {
    echo 'Error';
}

unfortunatelly it will be an empty row in you table.

But if you don't want junk rows, do something like this:

$name = $_POST['name'] ?? false;
$movie = $_POST['movie'] ?? false;

if ( $name and $movie ) {
    $query = "INSERT INTO data.base(name, movie) VALUES('" . $name . "', '" . $movie . "')";
    $result = pg_query($query);
    echo 'Thanks';
} else {
    echo 'Error';
}

I recommend you to escaping the inputs.