PHP Student Management System Project

Project name: Student Management System

Technologies used:

• Frontend: HTML, CSS, Bootstrap
• Backend: PHP
• Database: MySQL
• Database access: PDO
• Client-side interaction: JavaScript

Main features:

• Add a new student.
• View all student records.
• Search students by name or course.
• Edit student details.
• Delete a student record.
• Validate form inputs.
• Use prepared statements for database queries.

This lesson presents the core CRUD application. Authentication, role-based permissions, attendance, and fee management can be added as future features.

Create edit_student.php. The page retrieves a student by ID and updates the student's details.

<?php
require_once "db.php";

$id = filter_input(INPUT_GET, "id", FILTER_VALIDATE_INT);

if (!$id || $id < 1) {
    http_response_code(400);
    exit("Invalid student ID.");
}

$stmt = $pdo->prepare(
    "SELECT id, name, email, course
     FROM students WHERE id = :id"
);
$stmt->execute(["id" => $id]);

$student = $stmt->fetch();

if (!$student) {
    http_response_code(404);
    exit("Student not found.");
}

$message = "";

if ($_SERVER["REQUEST_METHOD"] === "POST") {
    $name = trim($_POST["name"] ?? "");
    $email = trim($_POST["email"] ?? "");
    $course = trim($_POST["course"] ?? "");

    if ($name === "" || $course === "") {
        $message = "Name and course are required.";
    } elseif (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
        $message = "Enter a valid email address.";
    } else {
        try {
            $stmt = $pdo->prepare(
                "UPDATE students
                 SET name = :name,
                     email = :email,
                     course = :course
                 WHERE id = :id"
            );

            $stmt->execute([
                "name" => $name,
                "email" => $email,
                "course" => $course,
                "id" => $id
            ]);

            header("Location: index.php?updated=1");
            exit;

        } catch (PDOException $e) {
            error_log($e->getMessage());
            $message = "Unable to update student details.";
        }
    }

    $student["name"] = $name;
    $student["email"] = $email;
    $student["course"] = $course;
}
?>

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>Edit Student</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css"
          rel="stylesheet">
</head>
<body class="bg-light">

<div class="container py-5">
    <div class="card mx-auto shadow-sm" style="max-width:600px;">
        <div class="card-header bg-primary text-white">
            Edit Student
        </div>

        <div class="card-body">

            <?php if ($message !== ""): ?>
                <div class="alert alert-danger">
                    <?= htmlspecialchars($message, ENT_QUOTES, "UTF-8") ?>
                </div>
            <?php endif; ?>

            <form method="POST">
                <div class="mb-3">
                    <label class="form-label">Name</label>
                    <input type="text" name="name"
                           class="form-control" required maxlength="100"
                           value="<?= htmlspecialchars($student["name"], ENT_QUOTES, "UTF-8") ?>">
                </div>

                <div class="mb-3">
                    <label class="form-label">Email</label>
                    <input type="email" name="email"
                           class="form-control" required maxlength="150"
                           value="<?= htmlspecialchars($student["email"], ENT_QUOTES, "UTF-8") ?>">
                </div>

                <div class="mb-3">
                    <label class="form-label">Course</label>
                    <input type="text" name="course"
                           class="form-control" required maxlength="100"
                           value="<?= htmlspecialchars($student["course"], ENT_QUOTES, "UTF-8") ?>">
                </div>

                <button class="btn btn-success" type="submit">
                    Update Student
                </button>

                <a href="index.php" class="btn btn-secondary">
                    Cancel
                </a>
            </form>

        </div>
    </div>
</div>

</body>
</html>

This illustrates the update query. Before deploying it, protect the form with authentication and CSRF validation, as shown in the next section.