How do I enter parameters in my SQL command?

Question

I have a function where I set a few parameters, these parameters I want to pass on later in my SQL query as a variable.

My goal is not to write an extra function for every color I have in my game.

I want a function and whenever I enter the parameters it should be processed in my SQL query.

 public function setVillageRes(int $villageID, int $ownerID, $res, $fabrik){
        $stmt = $this->pdo->prepare("SELECT * FROM village WHERE villageID = ? AND ownerID = ?");
        $stmt->execute([$villageID, $ownerID]);
        $result = $stmt->fetch();

        if(is_array($result)){

            $sql = "UPDATE village SET `$res` = ? WHERE `$villageID` = ? AND `$fabrik` = ?";
            $stmt = $this->pdo->prepare($sql);
            $stmt->execute([$res, $villageID, $fabrik]);

        } else {
            return "RE-3001";
        }
    }

your update query makes no sense $villageID = ? would result in something like 1=1 which is always true, so why do you try to substitute the columnnames? — nbk
– nbk, Commented Sep 6, 2022 at 22:13
Is this what oyu want ? stackoverflow.com/questions/14098222/… — Rohit Gupta
– Rohit Gupta, Commented Sep 8, 2022 at 5:02
Does this answer your question? Pass parameters to MySQL script — Rohit Gupta
– Rohit Gupta, Commented Sep 8, 2022 at 5:02

Barmar · Accepted Answer · 2022-09-06 21:47:50Z

0

You shouldn't use the variables in the UPDATE query, use the column names.

$sql = "UPDATE village SET `res` = ? WHERE `villageID` = ? AND `fabrik` = ?";

answered Sep 6, 2022 at 21:47

Barmar

789k57 gold badges555 silver badges669 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How do I enter parameters in my SQL command?

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related