Doubt - SQL update from PHP form

Question

I have a table where columns 1 to 5 are fixed data that I feed SQL and it appears the listing on the WEB page. On this WEB page I have a form in which the user must answer 3 questions, in inputs in columns 6 to 8.

It turns out that the spreadsheet is updating all the lines with the dice answered in the last line. how do I fix?

My update function:

function insereDado($conexao, $id, $campo6, $campo7, $campo8) {
$query = "update dbo.avalia_pf2 set campo6 = '{$campo6}', campo7 = '{$campo7}', campo8 = '{$campo8}' where id= {$id}";
$resultadoDaInsercao = mssql_query($query, $conexao);
return $resultadoDaInsercao;

My variables:

$id = 'id';
$campo6 = $_POST["campo6"];
$campo7 = $_POST["campo7"];
$campo8 = $_POST["campo8"];

My form:

<form action="adiciona-dado.php" method="post">
                <table class="table table-striped">         
                    <thead>
                        <tr>
                            <th class="titulo_cell">Título 1</th>
                            <th class="titulo_cell" >Título 2</th>
                            <th class="titulo_cell" >Título 3</th>
                            <th class="titulo_cell" >Título 4</th>
                            <th class="titulo_cell" >Título 5</th>
                            <th class="titulo_cell" >Pergunta 1</th>
                            <th class="titulo_cell" >Pergunta 2</th>
                            <th class="titulo_cell" >Pergunta 3</th>
                        </tr>
                    </thead>

                    <?php $dados = listaDados($conexao); foreach($dados as $dado) : ?>
                        <tbody>
                            <tr>
                                <td name="campo1"> <?php echo $dado['Campo1']; ?> </td>
                                <td name="campo2"> <?php echo $dado['Campo2']; ?> </td>
                                <td name="campo3"> <?php echo $dado['Campo3']; ?> </td>
                                <td name="campo4"> <?php echo $dado['Campo4']; ?></td>
                                <td name="campo5"> <?php echo $dado['Campo5']; ?> </td>
                                <td><input type="text" name="campo6" class="form-control"><? $dado['Campo6']?></input></td>
                                <td><input type="text" name="campo7" class="form-control"><? $dado['Campo7']?></input></td>
                                <td><input type="text" name="campo8" class="form-control"><? $dado['Campo8']?></input></td>
                                <td><button type="submit" class="btn">Incluir</button></td>
                            </tr>
                        </tbody>
                    <?php endforeach ?>
                </table>
            </form>

Important information: my ID is "NOT NULL" (not Primary key with auto increment) How do I fix UPDATE? It’s some information I pass when declaring the $id variable but I’m not getting the result.

Answer 1

Well, let’s go through the basics, When you call insedeDados function you are passing the ID? if yes, give a var_dumb($id) inside its function and see if it returns the id number, maybe the function is not receiving the id and so is giving problem.

Answer 2

1) You need to create a field hidden with the value of your id in the form, as in <input type="hidden" name="id" value="<?=$id_do_registro?>">

2) Recover this id on next page by $id = filter_input(INPUT_POST, 'id', FILTER_SANITIZE_NUMBER_INT);

Notice that I used the function filter_input to recover the value. You should use this filter whenever retrieving user-sent variables, for security. Read more on http://php.net/manual/en/function.filter-input.php