在SQL数据库中插入HEX代码

Question

I tried to insert a hex code to an SQL database by PHP, but it cannot be done. I tried to UNHEX but it does not give any results. Input code:

<input type="color" name="color">

Inserting PHP code:

$color = $_POST['color'];
$query = "INSERT INTO `kolor` (`color`) VALUES (UNHEX($color))";

Answer 1

Make this :

$query = "INSERT INTO kolor (color) VALUES ('$color')";

But becarfull because you have a big SQL Injection with this syntax you need to prepare your request before.

For more information : https://www.owasp.org/index.php/SQL_injection