Column 'id' in where clause is ambiguous

jamesxff

Little confused by this one and would appreciate some help, i've tested the statement in the database itself and it returns without any complaints, but when using it within php coding it cries. I'm a little more puzzled because i've been looking and people have only seemed to have had problems with this when joining two tables. I'm not doing that at all, 1 single table and only one single entry in the database with the same ID, and id is the only column called id in the table.

Anyway thanks in advance.

jumpdate is 2008-08-01
jumptime is 10:30:00
id is 1

$sql = 'UPDATE 
               tandem_booking 
           SET 
               date_accepted = NOW(),
               date_jump = "' . $_POST['jumpdate'] . '",
               time_jump = "' . $jumptime . '",
               accepted = 1
           WHERE
               id = ' . $_POST['id'];
$booked = mysql_query($sql) or die(mysql_error().$sql);

sneakyimp

My first reaction is that your script is vulnerable to SQL injection by the bad guys. You should validate your $_POST data before sticking it straight into a query or you are asking for trouble.

I can't see why that query would result in an error either. Maybe try this one instead?

$sql = 'UPDATE
               tandem_booking tb
           SET
               tb.date_accepted = NOW(),
               tb.date_jump = "' . $_POST['jumpdate'] . '",
               tb.time_jump = "' . $jumptime . '",
               tb.accepted = 1
           WHERE
               tb.id = ' . $_POST['id'];

jamesxff

Hi,

Thanks for your help, though I figured out what it was, I was looking at the wrong part of the coding as to where the query actually was getting stuck, there was another query which actually had a table join within. Fixed it once i'd figured out very quickly once I found the right query that was causing the problem.

I was trying to post that it was fixed earlier on however the forum has a delay on threads being posted, so couldn't. DOH!

Ah well never mind, thanks again. 🙂