HTML表单数据到MySQL数据库插入教程：处理多选框与安全实践

<div class="form-control">
    <label>
    4. Physical Side Effects Reported
    <small>(Check all that apply)</small>
    </label>
    <!-- Input Type Checkbox -->
    <label for="inp-1">
        <input type="checkbox"
               name="phys_symptoms[]" value="Pain">Pain</input>
    </label>
    <label for="inp-2">
        <input type="checkbox"
               name="phys_symptoms[]" value="Swelling">Swelling</input>
    </label>
    <label for="inp-3">
        <input type="checkbox"
               name="phys_symptoms[]" value="Redness">Redness</input>
    </label>
    <label for="inp-4">
        <input type="checkbox"
               name="phys_symptoms[]" value="Rash">Rash</input>
    </label>
    <label for="inp-5">
        <input type="checkbox"
               name="phys_symptoms[]" value="None">None</input>
    </label>
</div>
<div class="form-control">
    <label>
        5. Illness Side Effects Reported
        <small>(Check all that apply)</small>
    </label>
    <!--Input Type Checkbox -->
    <label for="inp-1">
        <input type="checkbox"
               name="ill_symptoms[]" value="Headache">Headache</input>
    </label>
    <label for="inp-2">
        <input type="checkbox"
               name="ill_symptoms[]" value="Chills">Chills</input>
    </label>
    <label for="inp-3">
        <input type="checkbox"
               name="ill_symptoms[]" value="Dirrahea">Dirrahea</input>
    </label>
    <label for="inp-4">
        <input type="checkbox"
               name="ill_symptoms[]" value="Tiredness">Tiredness</input>
    </label>
    <label for="inp-5">
        <input type="checkbox"
               name="ill_symptoms[]" value="Fever">Fever</input>
    </label>
    <label for="inp-6">
        <input type="checkbox"
               name="ill_symptoms[]" value="Dizziness">Dizziness</input>
    </label>
    <label for="inp-7">
        <input type="checkbox"
               name="ill_symptoms[]" value="Nausea">Nausea</input>
    </label>
    <label for="inp-8">
        <input type="checkbox"
               name="ill_symptoms[]" value="None">None</input>
    </label>
</div>

<?php

// 数据库连接配置
$servername = "localhost";
$username = "root";
$password = "";
$dbname = "csurv";

// 建立数据库连接
$conn = new mysqli($servername, $username, $password, $dbname);

// 检查连接是否成功
if ($conn->connect_error) {
    die("ERROR: Could not connect. " . $conn->connect_error);
}

// 从 $_POST 中获取数据
// 对于单选按钮和下拉菜单，直接获取值
$answer = $_POST['answer'] ?? ''; // 使用null合并运算符，防止未设置的索引报错
$agegroup = $_POST['agegroup'] ?? '';
$vaccines = $_POST['vaccines'] ?? '';

// 对于多选框，$_POST 会返回一个数组
// 使用 implode() 将数组元素用逗号连接成字符串
$physSymptomsArray = $_POST['phys_symptoms'] ?? []; // 确保即使没有选择也得到一个空数组
$physSymptoms = implode(', ', $physSymptomsArray); // 用逗号和空格连接

$illSymptomsArray = $_POST['ill_symptoms'] ?? [];
$illSymptoms = implode(', ', $illSymptomsArray); // 用逗号和空格连接

// 使用预处理语句（Prepared Statements）防止SQL注入
// 这是非常关键的安全实践！
$sql = "INSERT INTO submisiion (qualified, agegroup, vaccinetype, physsymptoms, illsymptoms) VALUES (?, ?, ?, ?, ?)";

// 准备语句
$stmt = $conn->prepare($sql);

// 检查语句是否准备成功
if ($stmt === false) {
    die("ERROR: Could not prepare statement: " . $conn->error);
}

// 绑定参数
// "sssss" 表示五个参数都是字符串类型
$stmt->bind_param("sssss", $answer, $agegroup, $vaccines, $physSymptoms, $illSymptoms);

// 执行语句
if ($stmt->execute()) {
    echo "<h3>数据已成功存储到数据库。</h3>";
    echo nl2br("\n您提交的数据:\n");
    echo nl2br("是否接种: $answer\n");
    echo nl2br("年龄组: $agegroup\n");
    echo nl2br("疫苗类型: $vaccines\n");
    echo nl2br("身体副作用: $physSymptoms\n");
    echo nl2br("疾病副作用: $illSymptoms\n");
} else {
    echo "ERROR: 无法执行语句: " . $stmt->error;
}

// 关闭语句和连接
$stmt->close();
$conn->close();

?>