update database using sprintf

[droidus]

how would i modify this code so that it works, using sprintf?:

 

if (mysql_num_rows($result) > 0) {
		mysql_query(sprintf("UPDATE members SET (Age) VALUES ('%s')",mysql_real_escape_string($age)))
		or die(mysql_error());  
		mysql_close($con);
	}

[Alex]

Your problem isn't with using sprintf, it's the query itself. That's not how you do a MySQL update query.

[dcro2]

I think you mean:

mysql_query(sprintf("UPDATE members SET Age = '%s'", mysql_real_escape_string($age)))

You might want to add a WHERE clause to that though, or you'll update all the rows in that table. For example:

UPDATE members SET age = '12' WHERE username = 'droidus'

[droidus]

thanks! lol, i was looking at the sprintf, and the update clause, but wasn't exactly sure how to put 1+1 together

[droidus]

I think you mean:

mysql_query(sprintf("UPDATE members SET Age = '%s'", mysql_real_escape_string($age)))

You might want to add a WHERE clause to that though, or you'll update all the rows in that table. For example:

UPDATE members SET age = '12' WHERE username = 'droidus'

 

so let me make sure that i have this right:

 

mysql_query(sprintf("UPDATE members SET Age = '%s' WHERE uname = $_SESSION[user]", mysql_real_escape_string($age)))

[dcro2]

You'll need single quotes around that string you're comparing `uname` against:

mysql_query(sprintf("UPDATE members SET Age = '%s' WHERE uname = '$_SESSION[user]'", mysql_real_escape_string($age)))