单独为数据库字段使用连接变量

Question

I am new to stackoverflow and am after a little help. I have already tried searching for what I am about to ask, but cannot find any relevant topics, so here goes:

I have a PHP page, that gets a list of venues and it's town/city from a table within a MySQL database, which I have then concatenated to populate a dropdown, e.g. each <option> will display "[venue], [town/city]".

What I am trying to do is when the user selects one of the options, I want to store the [venue] and [town/city] as separate fields in another table within the MySQL database.

I would really appreciate any help.

Answer 1

I think the best way is to put the datarecord ids (primary key value) into the value attribute of the <option> tags, then on the server side requery the data of the selected id from the database. This way your form can't be manipulated with unwanted data.

To be more clear, I would do it like in this simplified semi pseudocode:

<?php
$action = isset($_GET['action']) ? $_GET['action'] : null;

if($action == "save") {
  $id = $_POST['venue'];

  if(!empty($id)) {
    /* fetch data belonging to $id from database and then save venue and town/city
       as separate fields in another table */
  }
}

/* fetch all data for the selectbox from the db and store it in $data */
?>
<form action="?action=save" method="post">
  <select name="venue" size="1">
    /* iterate through $data and create $id and $caption */
    <option value="<?php echo $id; ?>"><?php echo $caption; ?></option>
    /* iteration end */
  </select>

  <input type="submit" value="save" />
</form>