Adding value to database via php [duplicate]

Question

Can someone tell me how I can add value to database?

My code looks like this:

        if(isset($_GET['gold']))//
      {
        $gold = $_GET['gold'];
        mysqli_query($db_handle, "UPDATE serverplayers SET Gold='$gold' WHERE Unique_Id = '$unique_id'");
      }
    }
  mysqli_close($db_handle);
}

In this code I'm set new value "gold" at table "gold" . But I don't want do that . I want add value (+) to current value in "gold" table.

Note:"$gold" is my variable , "gold" is my table.

Thanks for any advice. Best Regards Piter.

Your script is at risk of SQL Injection Attack Have a look at what happened to Little Bobby Tables Even if you are escaping inputs, its not safe! Use prepared parameterized statements. — John Conde
– John Conde, Commented Mar 12, 2018 at 12:32
To add using a prepared statement, you need SET gold = gold + ? WHERE .... — jeroen
– jeroen, Commented Mar 12, 2018 at 12:37

Sylwester Kocański · Accepted Answer · 2018-03-12 12:46:21Z

0

This method is way too vulnerable to sql injection, you should at least check if $_GET['gold'] is a number and isn't equal to 0.

If you want to add number to existing column in mysql you should do something like:

mysqli_query($db_handle, "UPDATE serverplayers SET Gold=(ifnull(Gold, 0) + ".$gold.") WHERE Unique_Id = '".$unique_id . "'");

answered Mar 12, 2018 at 12:46

Sylwester Kocański

16

Sign up to request clarification or add additional context in comments.

2 Comments

Piotrek Borkowski Over a year ago

Thanks you very much ! / Dziękuje za pomoc! :)

Sylwester Kocański Over a year ago

Nie ma problemu, powodzenia :)

Rafiqul Islam · Accepted Answer · 2018-03-12 12:41:31Z

0

Update your query like this:

"UPDATE serverplayers SET Gold='".$gold."' WHERE Unique_Id = '".$unique_id."'";

answered Mar 12, 2018 at 12:41

Rafiqul Islam

1,6561 gold badge14 silver badges25 bronze badges

Collectives™ on Stack Overflow

Adding value to database via php [duplicate]

2 Answers 2

2 Comments

Comments

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Linked

Related