Getting the value from checkbox - php

Question

I am trying to update my table with a checkbox. The process is like this, In every row there is a checkbox and if I check one of it and click the submit button the checked row will update a column with a specific value.
This is what I did.
<tbody>
<?php
while ($fetch = mysqli_fetch_array($query,MYSQLI_BOTH)) {
?>
<tr>
<td><input type="checkbox" name="approveArr[]" value=" <?php $prsid = $fetch['prsid']; ?>"></td>
<?php echo "<td>". $prsno = $fetch['prsno'] ."</td>" ;?>
<?php echo "<td>". $qty = $fetch['qty'] ."</td>" ;?>
<?php echo "<td>". $productcode = $fetch['productcode'] ."</td>" ;?>
<?php echo "<td>". $productdescription = $fetch['productdescription'] ."</td>" ;?>
<?php echo "<td>". $vendors = $fetch['vendors'] ."</td>" ;?>
<?php echo "<td>". $prsdate = $fetch['prsdate'] ."</td>" ;?>
<?php echo "<td>". $status = $fetch['status'] ."</td>"; ?>
</tr>
<?php } ?>
<?php
if(isset($_POST['submits'])){
print_r($_POST);
$update = "UPDATE prs set status='Approved' where id='$prsid'";
$query = mysqli_query($conn,$update);
}
?>
</tbody>

Answer 1

I made an assumption with the following code in that I added the form and table elements to complete the picture - but in your original code you had left the database vulnerable to sql injection which I try to correct here.
<form method='post'>
<table>
<tbody>
<?php
while ( $fetch = mysqli_fetch_array( $query,MYSQLI_BOTH ) ) {
/* assign row values to variables... */
$prsid = $fetch['prsid'];
$prsno = $fetch['prsno'];
$qty = $fetch['qty'];
$productcode = $fetch['productcode'];
$productdescription = $fetch['productdescription'];
$vendors = $fetch['vendors'];
$prsdate = $fetch['prsdate'];
$status = $fetch['status'];
/* use placeholders to represetn each variable in the output html and assign relevant value for printing */
printf('
<tr>
<td><input type="checkbox" name="approveArr[]" value="%s>"></td>
<td>%s</td>
<td>%s</td>
<td>%s</td>
<td>%s</td>
<td>%s</td>
<td>%s</td>
<td>%s</td>
</tr>',
/* the variables */
$prsid,
$prsno,
$qty,
$productcode,
$productdescription,
$vendors,
$prsdate,
$status
);
}
?>
</tbody>
</table>
<input name='submits' type='submit' />
</form>
<?php
if( $_SERVER['REQUEST_METHOD']=='POST' && isset( $_POST['submits'] ) ){
$approveArr=$_POST['approveArr'];
$sql='update prs set status='approved' where id=?';
$stmt=$conn->prepare($sql);
$stmt->bind_param( 'i', $status );
foreach( $approveArr as $status ) $stmt->execute();
}
?>