Cannot pass a string to a SQL Query

Question

I have the following code:

    $RefEquipamento = mysql_real_escape_string($_GET['ID']);
    mysql_select_db($database_connLOOPGEST, $connLOOPGEST);
    $query_rs_equipamento = sprintf("SELECT * FROM  clientes_listaequipamentos WHERE referenciacliente = $RefEquipamento ORDER BY datacriacao_loop DESC LIMIT 1");
    $rs_equipamento = mysql_query($query_rs_equipamento, $connLOOPGEST) or die(mysql_error());
    $row_rs_equipamento = mysql_fetch_assoc($rs_equipamento);
    $totalRows_rs_equipamento = mysql_num_rows($rs_equipamento);

    echo json_encode($row_rs_equipamento);

I'm not an expert in PHP or MySQL, I'm trying to learn something. I'm using Dreamweaver.

The code above works when I pass a number as an argument (for ex. If $RefEquipamento is 200456) this works fine, but when I tried to pass a string (let's say I'm passing the string "equip1" this doesn't work, the echo gives me the following message:

"Unknown column 'equip1' in 'where clause'"

Yoni Hassin · Accepted Answer · 2012-11-21 16:16:26Z

3

try:

$RefEquipamento = "'" . mysql_real_escape_string($_GET['ID']) . "'"; so mysql will handle it as a string.

OR

$query_rs_equipamento = sprintf("SELECT * FROM clientes_listaequipamentos WHERE referenciacliente = '$RefEquipamento' ORDER BY datacriacao_loop DESC LIMIT 1");

edited Nov 21, 2012 at 16:16

answered Nov 21, 2012 at 16:05

Yoni Hassin

5841 gold badge5 silver badges17 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Mario Cordeiro Over a year ago

Thanks very much for your quick answer. This works for me: $query_rs_equipamento = sprintf("SELECT * FROM clientes_listaequipamentos WHERE referenciacliente = '$RefEquipamento' ORDER BY datacriacao_loop DESC LIMIT 1");

Alberto León · Accepted Answer · 2012-11-21 16:08:53Z

1

If you send to MySQL command a word, without marking with --> ' <---- MySQL Understand you are giving the name of a field or columns.

Remember that allways you need to past a word as variable, you need mark it.

the number don't need special mark

Yoni Hassin response is the solution, mark it as answer

answered Nov 21, 2012 at 16:08

Alberto León

2,9112 gold badges28 silver badges27 bronze badges

1 Comment

Mario Cordeiro Over a year ago

I will note that. Thank you very much Alberto.

Collectives™ on Stack Overflow

Cannot pass a string to a SQL Query

2 Answers 2

1 Comment

1 Comment

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

1 Comment

Related