literals in array keys

hkarre

i am having a problem with the following code:

$sql="insert into table (title,name) values ('$_POST['title']','$_POST['name']')";

when i run it throws an exception:

Parse error: parse error, expecting T_STRING' orT_VARIABLE' or `T_NUM_STRING' in /var/www/html/myscript/myscript.php on line 14

if remove the single quotes from around the array keys i.e. '$POST[title]' instead of '$POST['title']' it works fine.

i thought i was supposed to make sure that all of my literal array keys were supposed to quoted, do i need to escape the quotes somehow?

drew010

try enclosing your array in { } brackets like this:

$sql="insert into table (title,name) values ({'$POST['title']}','{$POST['name']}')";

it should work like that.

hkarre

hmm, tried that and it didn't work. i did some more digging and found that this does work, does anyone have an explanation why the following code works but the previously posted solutions don't? Or is this maybe peculiar to my setup and i have to tweak the php.ini?

$sql="insert into table (title,name) values (('{$_POST['title']}'),('{$_POST['name']}'))";

Anyway, problem seems to be solved, I was just wondering if anyone could think of a reason why this was.

drew010

i see why it didnt work, i accidentally put one of the brackets before the '

$sql="insert into table (title,name) values ('{$POST['title']}','{$POST['name']}')";

that should be correct.

LordShryku

There's really no difference there from what drew said. I use a diffrerent technique, just as a rule of thumb with all variables, concatenate them with the string.

$sql="insert into table (title,name) values ('".$_POST['title']."','".$_POST['name']."')";