Quick SQL question

[slannesh]

Heya, quick question. I have a variable called $country_id'. How do i put it in my sql insert? I tried this but it keeps coming out as 0.

$query = "INSERT INTO province (country_id, province) " .
               "VALUES ('$country_id', '" 
		. $_POST['province'] . "');";

I echoed the variable to test its value and it come out right. Am i missing something?

Thanks for the time. 😃

[rlee923]

slannesh wrote:

Heya, quick question. I have a variable called $country_id'. How do i put it in my sql insert? I tried this but it keeps coming out as 0.

$query = "INSERT INTO province (country_id, province) " .
               "VALUES ('$country_id', '" 
		. $_POST['province'] . "');";

I echoed the variable to test its value and it come out right. Am i missing something?

Thanks for the time. 😃

try

"INSERT INTO province ".
"VALUES ('$country_id', '"
. $_POST['province'] . "');";

[NogDog]

There's nothing wrong with the PHP syntax. I would suggest echoing out the variables in question and seeing if they are really set with the expected values.

[slannesh]

Ok. Ill give it a try. Thanks 😃

[TheDefender]

You've gotta escape your single quotes...

$query = "INSERT INTO province (country_id, province) VALUES ('" . $country_id . "', '" . $_POST['province'] . "');"; 

[bradgrafelman]

You also should never place user-supplied data directly into a SQL query. Instead, you should always escape it with [man]mysql_real_escape_string/man.