From b2b81c68cf4d53599270d0bc60139c5114955694 Mon Sep 17 00:00:00 2001
From: Kiran PP <58929890+7h3h4ckv157@users.noreply.github.com>
Date: Mon, 29 Aug 2022 02:20:00 +0530
Subject: [PATCH] Update services.php

---
 services.php | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/services.php b/services.php
index 8c137c9..185fff0 100644
--- a/services.php
+++ b/services.php
@@ -1,20 +1,20 @@
 <?php
-// database connection code
+
 if(isset($_POST['txtName']))
 {
-// $con = mysqli_connect('localhost', 'database_user', 'database_password','database');
-$con = mysqli_connect('localhost', 'root', '','db_service');
-
-// get the post records
 
+$con = mysqli_connect('localhost', 'root', '','db');
+	
 $txtName = $_POST['txtName'];
 $txtAdh = $_POST['txtAdh'];
+	
+$sanitized_txtName = mysqli_real_escape_string($db, txtName);
+$sanitized_txtAdh =  mysqli_real_escape_string($db, txtAdh);
 
-// database insert SQL code
-$sql = "INSERT INTO `tbl_service` (`Id`, `fldName`, `fldAdh`) VALUES ('0', '$txtName', '$txtAdh')";
+$sql = "INSERT INTO `tbl_service` (`Id`, `fldName`, `fldAdh`) VALUES ('0', '$sanitized_txtName', '$sanitized_txtAdh')";
 
-// insert in database 
 $rs = mysqli_query($con, $sql);
+	
 if($rs)
 {
 	echo "Registered Succefully";
@@ -26,3 +26,4 @@
 	
 }
 ?>
+c