View difference between Paste ID: p0szYx8U and GmyGpnpk

 <?php
 
-// Create database handle
+
 
 $sql = <<< SQL
-// The SQL that we will use; the question marks are
+
-// placeholders for where the values will be placed
+
         `D_License_No`,
         `Arrived_Time`,
         `Charge`
     ) VALUES (
         ?, ?, ?, ?
     );
 SQL;
 
 $stmt = $mysqli->prepare($sql);
 if ($stmt === false) {
     die('Could not prepare SQL: '.$mysqli->error);
-// Prepare the SQL and get a statement handle
+
-// Prepared queries are send to the database, which
+
-// checks it for errors and also optimizes it so that
+
-// consecutive calls to `execute()` are performed
+
-// faster. In this case, however, we are using a prepared
+
-// statement to avoid malicious data from affecting
+
-// the query.
+
 $vLicense = filter_input(INPUT_POST, 'V_License_No', FILTER_SANITIZE_STRING);
 $dLicense = filter_input(INPUT_POST, 'D_License_No', FILTER_SANITIZE_STRING);
 $arrived  = date('H:i');
 if (isset($_POST['vehicle_type']) && $_POST['vehicle_type'] === 'four_wheel') {
-// Bind some variables to the statement
+
-// The bound variables here ($vLicense, $dLicense, etc.) are
+
-// defined here and bound to this statement. We are setting
+
-// the *values* of these variables further down.
+
 
 if ($stmt->execute() === false) {
     die('Could not execute query: '.$stmt->error);
 } else {
-// Set the values of the bound variables here:
+
 }