right syntax for mysql function

Question

I'm a beginner in mysql c# programming. I ran into the following error:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '"pass where username=admin1' at line 1

my "update_user_password" function is the following:

public Boolean update_user_password(string user_name, string new_password)
    {
        String uu = "update users set password=\"" + new_password + " where username=" + user_name;
        Boolean error = !execute_cmd_db(uu.ToString());
        return !error;
    }

Can anyone please tell me how I can fix this error?

you could fix it by adding some quotes, but I'm encouraging you to use prepared statements. — VMai
– VMai, Commented Jul 30, 2014 at 7:30

VMai · Accepted Answer · 2014-07-30 07:33:01Z

1

You have to use quotes around the values of username and password:

String uu = "update users set password'\" + new_password + "' where username='" + user_name+"'";

edited Jul 30, 2014 at 7:33

VMai

10.4k9 gold badges28 silver badges36 bronze badges

answered Jul 30, 2014 at 7:30

Jens

69.6k15 gold badges107 silver badges133 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

right syntax for mysql function

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related