mySQL INSERT INTO no errors

Question

$betadd = $user_data['bets'] + 1;
$username = $user_data['username'];
$userid = $user_data['user_id'];
$value = $_POST['wager'];
$setcoins = $user_data['coins'] -       $value;
mysql_query("INSERT INTO `multiplayer` (value, player1) VALUES ($value, $username)");

I had it inserting into the table at one point, but now it doesn't work, Value is an INT (11) and player1 is a VARCHAR(32). But it doesn't insert into the columns, can anyone help?

Please see the manual page for mysql_query() for examples about how to read error messages. — Álvaro González
– Álvaro González, Commented Apr 28, 2013 at 22:35
try to set your VALUES -always- in single/double quotes (depending your outer closures), even if they are numbers or ids. — user1299518
– user1299518, Commented Apr 28, 2013 at 22:38

Community · Accepted Answer · 2017-05-23 12:09:29Z

1

I would suggest you to encapsulate your variables and to debug your query by doing

mysql_query("INSERT INTO `multiplayer` (value, player1) VALUES ('$value', '$username')") or die(mysql_error());

Then I would like to remember you that mysql_ functions are deprecated so i would advise you to switch to mysqli or PDO and indeed you are at risk of sql injection, have a look here How can I prevent SQL injection in PHP?. You should use prepared statment to avoid any risk

edited May 23, 2017 at 12:09

CommunityBot

11 silver badge

answered Apr 28, 2013 at 22:38

Fabio

23.5k12 gold badges57 silver badges66 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Joop Eggen Over a year ago

Using "prepared statements" with place holders for parameters, also has the advantage of proper escaping of single quote, newline, backslash and so on.

Dinesh · Accepted Answer · 2013-04-28 22:44:10Z

0

change your

mysql_query("INSERT INTO `multiplayer` (value, player1) VALUES ($value, $username)");

to this

mysql_query("INSERT INTO `multiplayer` (value, player1) VALUES ('{$value}', '{$username)}'");

you need to add quotes to your values when you add it to db.. also I would suggest you look into PDO or mysqli .. mysql_query is deprecated and is not safe..

Dins

edited Apr 28, 2013 at 22:44

answered Apr 28, 2013 at 22:34

Dinesh

3,1031 gold badge21 silver badges19 bronze badges

Collectives™ on Stack Overflow

mySQL INSERT INTO no errors

2 Answers 2

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related