Mysql error in php code

Question

can't understand mysql error:

UPDATE static_pages SET order = " Some new data 222222

"Database error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'order = "

$query = 'UPDATE someTable SET '.$key.' = "'.$value.'"';

Here is $key = order; $value = 'new data 222222'; There is such keys in table: order, prices, contacts. Each of these updates well except the 'order'. Why?

Don't ... do ... this. [Parameterized queries](http://stackoverflow.com/questions/60174/best-way-to-stop-sql-injection-in-php/60496#60496) are your friend! — Jørn Schou-Rode, Apr 14 '10 at 15:31
@jorn-schou-rode maybe, but why do another keys are workable? — Max Frai, Apr 14 '10 at 15:33

score 8 · Accepted Answer · answered Apr 14 '10 at 15:32

8

ORDER is a reserved word.

Use back ticks to escape the column name:

UPDATE static_pages SET `order` = ";

Don't forget the WHERE clause so that you can update only specific records.

UPDATE static_pages SET `order` = "
WHERE id = 12;

answered Apr 14 '10 at 15:32

Marcus Adams

51,512
9
88
140

Yeah, I've totally forgot about reserved words. Thank you. – Max Frai Apr 14 '10 at 15:49

score 1 · Answer 2 · answered Apr 14 '10 at 15:33

1

order is a keyword in SQL. protect it with quotes in your query.

Best option is to rename your 'order' field

If you can't, here's a possible solution:

$query = 'UPDATE someTable SET `'.$key.'` = "'.$value.'"';

answered Apr 14 '10 at 15:33

Rodolphe

507
2
7

score 0 · Answer 3 · answered Apr 14 '10 at 15:32

0

Where is WHERE

Have to use WHERE clause with update buddy

answered Apr 14 '10 at 15:32

nik

3,668
3
20
33

1

You do not *have* to use a `WHERE` clause in an `UPDATE` statement. It is just very useful if you do not want to update every row in the table :) – Jørn Schou-Rode Apr 14 '10 at 15:36

score 0 · Answer 4 · answered Apr 14 '10 at 15:36

0

use `around the key`

$query = "UPDATE `someTable` SET `$key` = '$value'";

answered Apr 14 '10 at 15:36

Moak

12,093
27
108
164

score 0 · Answer 5 · answered Apr 14 '10 at 15:36

0

You can encase the reserved word orders into backticks '`' or rename the field.

answered Apr 14 '10 at 15:36

raveren

17,078
12
66
81

Mysql error in php code

5 Answers5