Send form array, php, mysql

From what I see in your code the variable that you need to save is called panta[] we should keep in mind the following.

Validate those points before anything.

Let's see if this is what you need, I'll give you another example so you can see it from another perspective.

<form action="" method="post">
<input type="checkbox" name="planta[]" id="planta1" value="rosa">
<input type="checkbox" name="planta[]" id="planta2" value="margarita">
<input type="checkbox" name="planta[]" id="planta3" value="clavel">
<button type="submit">Enviar</button>

Now we have an array called plant [] with the values inside ("rose, daisy, chrysanthemums) Assuming that all the values have been marked, otherwise only the values that have been marked before will be in the array. to send the form.

Now to add it to the database ...

require_once "conexión.php"; / el objeto $cnn viene de aquí

$sql = "INSERT INTO tabla (col1,col2,col3,col4) VALUES (:valor1,:valor2,:valor3)";
$result = $cnn->prepare($sql);
$result->execute(array(':valor1'=>$v1, ':valor2'=>$v2,':valor3'=>$v3));

the variables v1, v2, v3 would be the values you want to assign to the column

I already saw what the problem is, but still I do not want to eliminate it because it is very useful to me.

function filter($str) {
    global $db;
    $str = $db->escape_string(htmlspecialchars($str));
    $str = stripslashes(htmlspecialchars($str));
    $texto = trim($str); // Eliminamos espacios en blanco o caracteres al principio y final del post
    $texto = htmlspecialchars($texto); // funciona casi igual que htmlentities
    $texto = str_replace("INSERT","IN-SER-T",$texto);  // Remplazamos palabras que podrian ser usadas para alterar la BD
    $texto = str_replace("DELETE","DE-LE-TE",$texto);
    $texto = str_replace("TRUNCATE","TRUN-CA-TE",$texto);
    $texto = str_replace("SELECT","SE-LEC-T",$texto);
    $texto = str_replace("ALTER","AL-TER",$texto);
    $texto = str_replace("UPDATE","UP-DA-TE",$texto);
    $texto = str_replace("inert","IN-SER-T",$texto);  // Remplazamos palabras que podrian ser usadas para alterar la BD
    $texto = str_replace("delete","DE-LE-TE",$texto);
    $texto = str_replace("truncate","TRUN-CA-TE",$texto);
    $texto = str_replace("select","SE-LEC-T",$texto);
    $texto = str_replace("alter","AL-TER",$texto);
    $texto = str_replace("update","UP-DA-TE",$texto);
    $texto = str_replace("script","",$texto);
    $texto = str_replace("SCRIPT","",$texto);
    $texto = str_replace('"','"',$texto);
    $texto = str_replace("'","'",$texto);
    $texto = str_replace("<","&#60;",$texto);
    $texto = str_replace(">","&#62;",$texto);
    $texto = str_replace("(","",$texto);
    $str = str_replace(")","",$texto);
    return $str;
}

if($newsstate == true) {
    function filternews($str) {
        $texto = str_replace("INSERT","IN-SER-T",$str);  // Remplazamos palabras que podrian ser usadas para alterar la BD
        $texto = str_replace("DELETE","DE-LE-TE",$texto);
        $texto = str_replace("TRUNCATE","TRUN-CA-TE",$texto);
        $texto = str_replace("SELECT","SE-LEC-T",$texto);
        $texto = str_replace("ALTER","AL-TER",$texto);
        $texto = str_replace("UPDATE","UP-DA-TE",$texto);
        $texto = str_replace("inert","IN-SER-T",$texto);  // Remplazamos palabras que podrian ser usadas para alterar la BD
        $texto = str_replace("delete","DE-LE-TE",$texto);
        $texto = str_replace("truncate","TRUN-CA-TE",$texto);
        $texto = str_replace("select","SE-LEC-T",$texto);
        $texto = str_replace("alter","AL-TER",$texto);
        $texto = str_replace("update","UP-DA-TE",$texto);
        $texto = str_replace("script","",$texto);
        $texto = str_replace("SCRIPT","",$texto);
        $texto = str_replace('"','',$texto);
        $texto = str_replace("'","",$texto);
        $texto = str_replace("location","",$texto);
        $texto = str_replace("�","&iacute;",$texto);
        $texto = str_replace("�","&aacute;",$texto);
        $texto = str_replace("�","&oacute;",$texto);
        $texto = str_replace("�","&uacute;",$texto);
        $texto = str_replace("�","&eacute;",$texto);
        $texto = str_replace("�","&ntilde;",$texto);
        $texto = str_replace("�","&Iacute;",$texto);
        $texto = str_replace("�","&Aacute;",$texto);
        $texto = str_replace("�","&Oacute;",$texto);
        $texto = str_replace("�","&Uacute;",$texto);
        $texto = str_replace("�","&Eacute;",$texto);
        $texto = str_replace("�","&Ntilde;",$texto);
        return $str;
    }
}else{
    if(isset($_POST) || isset($_GET) || isset($_REQUEST) || isset($_COOKIE)){
            foreach($_POST as $key => $p)
            {
                $_POST[$key] = htmlentities(filter($p));
                $_POST[$key] = filter($p);
                $_POST[$key] = filter(html_entity_decode($p));
            }

            //Filtro las entradas v�a GET
            foreach($_GET as $key => $g)
            {
                $_GET[$key] = filter($g);
            }
        foreach($_COOKIE as $key => $s)
            {
                $_COOKIE[$key] = filter($s);
            }
            //Filtro las entradas v�a REQUEST
            foreach($_REQUEST as $key => $k)
            {
                $_REQUEST[$key] = filter($k);
            }
        }
        if(isset($_GET)){

            //Filtro las entradas v�a GET
            foreach($_GET as $key => $f)
            {
                $_GET[$key] = strip_tags(htmlentities(filter($f)));
            }
        }
}

This part is the one of the problem:

foreach($_POST as $key => $p)
            {
                $_POST[$key] = htmlentities(filter($p));
                $_POST[$key] = filter($p);
                $_POST[$key] = filter(html_entity_decode($p));
            }

If I delete it, the problem with the array is fixed, but the other characters would not have the filter and could cause problems.

PS: This code is not mine for logical reasons, that's why I do not know how to handle it well, but I do some things based on it.

Greetings.