How to update a mysql column with php?

Question

I'm making a website to connect to MySQL, but I've this function to update a SQL column in php:

<?php
    function insert_db($table, $id, $value, $id2, $value2){
       $con = mysql_connect($server, $user_name, $password); 
       $db_found = mysql_select_db($database); 
       if ($db_found){
          mysql_query(" UPDATE ".$table." SET ".$id."='".$value."' WHERE ".$id2." = '".$value2."'); //this doesn't work!
          mysql_close($con);
       }
       else {
          print "Database not found!";
          mysql_close($con);
       }
    }
?>

But this function doesn't work! Please help me! And is there a better way of doing this instead of "mysql_query()"?

Easy way: Look at the syntax highlighting to see, what is wrong. — Sirko
– Sirko, Commented Dec 1, 2013 at 14:00
You are using an obsolete database API and should use a modern replacement. Learn about prepared statements. — Quentin
– Quentin, Commented Dec 1, 2013 at 14:00
I edited the code and fixed it at the same time. You should also use MySQLi uk.php.net/mysqli — transilvlad
– transilvlad, Commented Dec 1, 2013 at 14:09
@tntu when you change the complete code of someone when you edit the question, you make the complete question useless. You might change relevant errors in the code that way. — Gerald Schneider
– Gerald Schneider, Commented Dec 1, 2013 at 14:09

Machavity · Accepted Answer · 2013-12-01 14:13:11Z

1

You can kinda answer your own question looking at the StackOverflow syntax highlights. You're missing a closing quote in the SQL statement. As for a better way, I always put my SQL into a variable first. It helps catch these kinds of things. Also, you're not sanitizing anything here in your function. I hope you're doing something elsewhere to prevent SQL injection.

I would NOT create your DB connection inside a function. You're creating a connection, executing ONE query, and then closing it. That's a lot of overhead for one function. I would pass your connection into your function and use it like that.

function insert_db($con, $table, $id, $value, $id2, $value2){
     $sql = "UPDATE " . $table . " 
       SET " . $id . "='" . $value . "' 
       WHERE " . $id2 . " = '".$value2."'";
       mysqli_query($con, $sql);
}

answered Dec 1, 2013 at 14:13

Machavity♦

31.8k27 gold badges97 silver badges108 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Gerald Schneider · Accepted Answer · 2013-12-01 14:06:05Z

1

you are missing a closing quote " at the end of your mysql_query().
your variables $server, $user_name, $password and $database do not exist inside your function. If you set it outside the function you have to import them with global $server, $user_name, $password, $database before you can use them.
The mysql_* functions are becoming deprecated. Don't write new code with them, use mysqli_* or PDO objects.

answered Dec 1, 2013 at 14:06

Gerald Schneider

17.8k10 gold badges64 silver badges79 bronze badges

Collectives™ on Stack Overflow

How to update a mysql column with php?

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related