Empfangene POST-Daten:";
echo "";
// Durch alle POST-Variablen iterieren
foreach ($_POST as $key => $value) {
// Wert escapen, um XSS zu vermeiden
$escapedValue = htmlspecialchars($value, ENT_QUOTES, 'UTF-8');
echo "- $key: $escapedValue
";
}
echo "
";
// POST-Daten abrufen und escapen
$date = isset($_POST['date']) ? trim($_POST['date']) : '';
$user_id = isset($_POST['user_id']) ? trim($_POST['user_id']) : '';
$category = isset($_POST['category']) ? trim($_POST['category']) : '';
$subject = isset($_POST['subject']) ? trim($_POST['subject']) : '';
$amount = isset($_POST['amount']) ? (float)$_POST['amount'] : 0.0;
$payment_method = isset($_POST['payment_method']) ? trim($_POST['payment_method']) : '';
// SQL-Statement vorbereiten
$stmt = $pdo->prepare("
INSERT INTO entries (date, user_id, category, subject, amount, payment_method)
VALUES (:date, :user_id, :category, :subject, :amount, :payment_method)
");
$stmt->bindParam(':date', $date);
$stmt->bindParam(':user_id', $date);
$stmt->bindParam(':category', $category);
$stmt->bindParam(':subject', $subject);
$stmt->bindParam(':amount', $amount);
$stmt->bindParam(':payment_method', $payment_method);
// Statement ausführen
$stmt->execute();
}
?>
FinanzApp - Neuer Eintrag
Neuer Eintrag