Jump to content

doesnt it do you head in when u cant see such a minor error


newbreed65

Recommended Posts

i know this is a very simply error were im just missing or got to many " or ' some were but im tried adding and removin ones and had no luck

 

heres a lil bit of were im getting a error in my code

 

        case "movietype":
          $sql = "UPDATE movietype SET
                    movietype_name = '" . $_POST['movie_name'] . "',
                  WHERE movietype_id = '" . $_GET['id'] . "'";
          break;

 

and this is the error im getting...

 

Invalid query: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'WHERE movietype_id = '4'' at line 3

$sql = "UPDATE movietype SET
movietype_name = '{$_POST['movie_name']}'
WHERE movietype_id = '{$_GET['id']}'";

 

Also note, that you're opening yourself for sql injection this way.

 

Safer way

$movieName = mysql_real_escape_string($_POST['movie_name']);
$id = (int)$_GET['id'];   //I'm assuming that id is numeric here
$sql = "UPDATE movietype SET
movietype_name = 'movieName'
WHERE movietype_id = '$id'";

 

 

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.