Grid / Data Grid Options (Tabular Display)

Data grid means displaying database records in table format.

Common Grid Features

• View records
• Edit / Delete buttons
• Sorting
• Paging (Pagination)

Example: Display Records in Table

echo "<table border='1'>";
echo "<tr><th>ID</th><th>Name</th></tr>";

while($row = mysqli_fetch_assoc($result)){
   echo "<tr>";
   echo "<td>".$row['id']."</td>";
   echo "<td>".$row['name']."</td>";
   echo "</tr>";
}
echo "</table>";

Exam Line: Data grids are used to display database records in tabular format.

---

SQL Injection

SQL Injection is a security attack where malicious SQL code is inserted into input fields.

Example of SQL Injection

' OR '1'='1

Unsafe Query

$sql = "SELECT * FROM users WHERE username='$u' AND password='$p'";

---

Prevention of SQL Injection

1. Prepared Statements

$stmt = mysqli_prepare($conn, "SELECT * FROM users WHERE username=?");
mysqli_stmt_bind_param($stmt, "s", $u);
mysqli_stmt_execute($stmt);

2. Input Validation

• Use filter_input()
• Use RegEx

Exam Definition: SQL Injection is a technique to manipulate database queries using malicious input.