> Each of these functions has 4 parameters – the 4 non primary key fields in each table. There is NO DATA SANITATION performed – the 4 values provided to the function will be placed in a simple SQL query. For example,
addCustomer(‘Sgt.’, ‘Robocop’, ‘Police station’, ‘000’); will execute the SQL:
INSERT INTO TABLE CUSTOMERS (FIRSTNAME, LASTNAME, ADDRESS, PHONE) VALUES (‘Sgt.’, ‘Robocop’, ‘Police station’, ‘000’);
and the database will automatically assign a CUSTID to the new record. This is obviously not best practice in real-world applications due to security issues and SQL injection, but f…