Jump to content

Recommended Posts

i know this is a very simply error were im just missing or got to many " or ' some were but im tried adding and removin ones and had no luck

 

heres a lil bit of were im getting a error in my code

 

        case "movietype":
          $sql = "UPDATE movietype SET
                    movietype_name = '" . $_POST['movie_name'] . "',
                  WHERE movietype_id = '" . $_GET['id'] . "'";
          break;

 

and this is the error im getting...

 

Invalid query: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'WHERE movietype_id = '4'' at line 3

$sql = "UPDATE movietype SET
movietype_name = '{$_POST['movie_name']}'
WHERE movietype_id = '{$_GET['id']}'";

 

Also note, that you're opening yourself for sql injection this way.

 

Safer way

$movieName = mysql_real_escape_string($_POST['movie_name']);
$id = (int)$_GET['id'];   //I'm assuming that id is numeric here
$sql = "UPDATE movietype SET
movietype_name = 'movieName'
WHERE movietype_id = '$id'";

 

 

This thread is more than a year old. Please don't revive it unless you have something important to add.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.