How do you use variables in a PHP SQL query?

Question

Trying to execute SQL query like below in my PHP. It works fine when executed on database.

UPDATE `wp_essx95_cf7dbplugin_submits` SET field_value = 'hiya' WHERE submit_time = '1500944028.4748' and field_name='status'

In my PHP I have two values stored as variable. I'm calling it like this:

$SQL = "UPDATE `wp_essx95_cf7dbplugin_submits` SET field_value = '$status' WHERE submit_time = '$trade_num' and field_name='status'";
$result = mysqli_query($db_handle, $SQL);
return $result;

However it doesn't seem to be working.

Am I writing the statement correctly? How can I further debug the situation, like see the result of the PHP query. I have the PHP function return $result, and echo it on my page, but it doesn't seem to output anything.

echo(setStatus($time, $sts));

Thanks

Kevin P · Accepted Answer · 2017-07-25 02:41:23Z

2

Try escaping the variables and adding a die statement if an error occurs. Also do not forget to clean the data to prevent mysql injection.

$SQL = "UPDATE `wp_essx95_cf7dbplugin_submits` SET field_value = '".$status."' WHERE submit_time = '".$trade_num."' and field_name='status'";
$result = mysqli_query($db_handle, $SQL) or die(mysqli_error($db_handle));
return $result;

answered Jul 25, 2017 at 2:41

Kevin P

6053 silver badges9 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

AakLak Over a year ago

Thanks so much, The die statement came in handy! I had connected to the SQL server, but didn't select a database yet.

Daniel Azamar · Accepted Answer · 2017-07-25 03:51:17Z

0

Try what @Kevin P says.... I looks like works ;)

answered Jul 25, 2017 at 3:51

Daniel Azamar

6927 silver badges9 bronze badges

Collectives™ on Stack Overflow

How do you use variables in a PHP SQL query?

2 Answers 2

1 Comment

Comments

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Related