Posted by user on 01/17/07 03:18

Tried those already.....

'$cccb_id' cccb.cccb_id = ('') order by memberError 1064
..'$cccb_id'. gets cccb.cccb_id = (.''.) order by memberError 1064
and $cccb_id and [cccb_id] and ........



ZeldorBlat wrote:

> user wrote:
>
>>Have require file with several query stings in it.
>>
>>Depending on user input one of strings is selected. Everything going
>>along smoothly until I wanted to also input a variable in string. If I
>>put string in program works ok, but, if I use string from require file I
>>can not seem to insert string.
>>
>>$cccb_id is sting..... to be inserted into $query4 and changes depending
>>on user input.
>>
>>$query4 = "select cccb.cccb_name as 'cccb', CONCAT(member_fname,'
>>',member_lname) as 'member' from member_cccb_lnk join member on
>>(member.member_no = member_cccb_lnk.member_no) join cccb on
>>member_cccb_lnk.cccb_id = cccb.cccb_id and cccb.cccb_id = "$cccb_id"
>>order by member";
>>
>>output is: select cccb.cccb_name as 'cccb', CONCAT(member_fname,'
>>',member_lname) as 'member' from member_cccb_lnk join member on
>>(member.member_no = member_cccb_lnk.member_no) join cccb on
>>member_cccb_lnk.cccb_id = cccb.cccb_id and cccb.cccb_id = order by
>>memberError 1064
>>
>>as you can see, "$cccb_id" is not in query string.
>>
>>any help will be appreciated.
>
>
> Count your double quotes:
>
> $query4 = "select cccb.cccb ... and cccb.cccb_id = "$cccb_id" order by
> member";
>
> So your $cccb_id isn't inside the quotes. You probably want to either
> remove those quotes so the variable is inserted into the string
> automatically or add .'s on both sides of $cccb_id.
>

• Next in forum: Re: Newbie PHP question: 'hiding' code on server from View Source
• Prev in forum: showerror() vs mysql_error() ..... difference
• Thread view: Re: php variable in sql string

[Reply to this message]