How to check if update PDO ran successfully?

Question

I have a PDO script that I use to update a row in a table. Here is my script:

    include 'dbconfig.php';

$id = $_POST['id'];
$data = $_POST['data'];

try {
    $options = [
    \PDO::ATTR_ERRMODE => \PDO::ERRMODE_EXCEPTION,
    \PDO::ATTR_DEFAULT_FETCH_MODE => \PDO::FETCH_ASSOC,
    \PDO::ATTR_EMULATE_PREPARES => false,
    ];
    $pdo = new PDO("mysql:charset=utf8mb4;host=$servername;dbname=$dbname", $username, $password);

    //$data = array_filter($data, 'strlen');

    $setStr = "";

    $values = array();

    foreach($data as $field => $value) {
        $setStr .= "$field=:$field,";
        $values[$field] = $value === "" ? null : $value;
    }

    $setStr = rtrim($setStr, ",");


    $values['id'] = $id;
    $stmt = $pdo->prepare("UPDATE products SET $setStr WHERE id = :id");
    $stmt->execute($values);


    echo json_encode(array('response'=>'success','message'=>'Product ID # '.$id." successfully updated."));

}catch(PDOException $e){
    
    echo json_encode(array('response'=>'danger','message'=>$e->getMessage()));
}
    $conn = null;

Currently, when this runs, if I try to input a character in a int field or something that makes the update fail it still returns the success message, how can I make it so if it encounters any error updating that it throws an exception?

and obligatory, your code is prone to SQL injection becuse you are adding input directly to SQL — Your Common Sense, Oct 08 '20 at 19:34

How to check if update PDO ran successfully?

0 Answers0