PHP Mysqli insert POINT to column

Question

I am trying to store longitude and latitude in a mysql table of datatype POINT using following code:-

$name = $_POST['name']
$lat = $_POST['lat'];
$long = $_POST['longi'];
$location = 'POINT('.$lat."".$long.')';
$sql = "insert into `metrix` (`name`, `coord`) values ('".$name.", '".$location."')";
$result = mysqli_query($con,$sql);
if (empty($result)) {
Echo mysqli_error($con);}

and it gives following MySql syntax error:-

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'POINT(13,132)')' at line 1

What is the correct way of doing this?

thank you

POINT is a function and you do not need to wrap with single quote, it should be as ".$location." — Abhik Chakraborty
– Abhik Chakraborty, Commented Mar 31, 2015 at 7:20
Don't use variable substitution in the first place, use a prepared statement. — Barmar
– Barmar, Commented Mar 31, 2015 at 7:22

Rahul Tripathi · Accepted Answer · 2015-03-31 07:21:32Z

2

Remove the single quotes as Point is a function

$sql = "insert into `metrix` (`name`, `coord`) values ('".$name."', ".$location.")";

Also I would recommend you to use Prepared statement as your present query is very much prone to SQL Injection.

answered Mar 31, 2015 at 7:21

Rahul Tripathi

173k33 gold badges292 silver badges341 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Jens · Accepted Answer · 2015-03-31 07:21:17Z

1

You miss an single qoute after ".$name.":

$sql = "insert into `metrix` (`name`, `coord`) values ('".$name."', ".$location.")";

and remove the single quotes arround ".$location." because POINTis a function and not a string.

And you should use prepared statements.

answered Mar 31, 2015 at 7:21

Jens

69.6k15 gold badges107 silver badges133 bronze badges

Comments

Sadikhasan · Accepted Answer · 2015-03-31 07:21:20Z

0

Remove single quote from location because POINT is function and Put single quote before and after name.

$sql = "insert into `metrix` (`name`, `coord`) values ('".$name."', ".$location.")";

answered Mar 31, 2015 at 7:21

Sadikhasan

18.6k23 gold badges84 silver badges126 bronze badges

Collectives™ on Stack Overflow

PHP Mysqli insert POINT to column

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related