MySQL query using variables

Question

I am using pretty much all variables in my query and i am pretty sure my syntax is wrong somewhere. I have tried a lot of different ways to setup my query. Basically im trying to update a specific row with the id, and the column that is the variable $loc.

    mysqli_query($con,"UPDATE `" . $tbvbr . "` SET $loc='".$addscore."' WHERE pid='".$pn."' ");

i also tried

   mysqli_query($con,"UPDATE `" . $tbvbr . "` SET $loc='$addscore' WHERE pid='$pn' ");

and

   mysqli_query($con,"UPDATE `" . $tbvbr . "` SET $loc=$addscore WHERE pid=$pn ");

Thanks

Have you tried adding a call to mysqli_error()? It'll tell you what the issue is. — andrewsi, Commented Sep 15, 2013 at 0:00
Your code is vulnerable to SQL injection. You need to use the appropriate method of your database library to escape your data prior to making the query. — Matt Ball, Commented Sep 15, 2013 at 0:01

DevlshOne · Accepted Answer · 2013-09-15 00:02:33Z

1

$sql = "UPDATE `" . $tbvbr . "` SET " . $loc . " = '" . $addscore . "' WHERE pid= '" . $pn . "'";
mysqli_query($con,$sql);

answered Sep 15, 2013 at 0:02

DevlshOne

8,4671 gold badge31 silver badges37 bronze badges

Thanks for your help. It works great! And i see what i need to do in the future.
– st15jap
Commented Sep 15, 2013 at 0:55

Add a comment |

havana · Accepted Answer · 2013-09-15 00:01:12Z

0

Does this work?

mysqli_query($con,"UPDATE ".$tbvbr." SET ".$loc." = '".$addscore."' WHERE pid = ".$pn);

answered Sep 15, 2013 at 0:01

havana

1205 bronze badges

Add a comment |

Collectives™ on Stack Overflow

MySQL query using variables

2 Answers 2

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Your Answer

Sign up or log in

Post as a guest

Related