php - 我需要其他东西来使 PHP 代码更安全吗？

Question

我有这么简单的 PHP 代码，它足够安全还是需要其他工作流程？并管理我的网络应用程序（我使用 Reactjs）更新、删除和选择我的数据库的不同行，最好将这些语句代码分隔在不同的 PHP 文件中，或者在一个 PHP 文件中使用 if() 来检查哪个操作执行是一个更好的主意？

选择 ：

<?php
header('Access-Control-Allow-Origin: *');
header('Content-type: application/json');
$serverName = "localhost";
$userName = "root";
$userPassword = "";
$dataBase = "todosdbs";
$con = new mysqli($serverName,$userName,$userPassword,$dataBase);
$stmt = $con->prepare("SELECT * FROM todostable");
$stmt->execute();
$result = $stmt->get_result();
$todosArray = $result->fetch_all(MYSQLI_ASSOC);
$todosArrayJSON = json_encode($todosArray);
echo $todosArrayJSON;    
$stmt->close();
$con->close();
?>

插入 ：

<?php
header("Access-Control-Allow-Headers: *");
/*header('Content-type: application/json');
header('Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE  ');*/
$data = json_decode(file_get_contents('php://input'),false);
$serverName = "localhost";
$userName = "root";
$userPassword = "";
$dataBase = "todosdbs";
$con = new mysqli($serverName,$userName,$userPassword,$dataBase);
$stmt = $con->prepare("INSERT INTO todostable (text,isDoneChecked,isEDitable,isRemoved) VALUES(?,?,?,?)");
$stmt->bind_param("siii",$data->text,intval($data->isEditable),intval($data->isDoneChecked),intval($data->isRemoved));
$stmt->execute();
$stmt->close();
$con->close();
?>

标签： phpmysqlreactjs