Mysql insert into string value [duplicate]

Question

I want to insert values from a string like $email $password $username

mysql_query("INSERT INTO `cyrexhosting`.`users` (`username`, `password`, `email`) 
             VALUES ('123', '123', '123'");

but i don't know how

You want to use something called "prepared statements" for this and the MySQLi driver (vs the mysql one you are using). — gen_Eric
– gen_Eric, Commented Sep 25, 2015 at 15:28
I honestly don't know which question to close this with, amongst 15,000 — Funk Forty Niner
– Funk Forty Niner, Commented Sep 25, 2015 at 15:30
Does this answer your question? stackoverflow.com/questions/1290975/… — devlin carnate
– devlin carnate, Commented Sep 25, 2015 at 15:30

DirtyBit · Accepted Answer · 2015-09-25 15:33:37Z

1

If you're using the deprecated mysql function:

$user = "121";
$pass = "dummy1";
$email = "[email protected]";


mysql_query("INSERT INTO users(username, password, email) VALUES('$user', '$pass', '$email')");

On the other hand, using mysqli:

mysqli_query($con, "INSERT INTO users (username, password, email) 
VALUES ('$user', '$pass', '$email')");

Note: where $con is the mysqli connection made variable.

edited Sep 25, 2015 at 15:33

answered Sep 25, 2015 at 15:30

DirtyBit

16.8k5 gold badges37 silver badges56 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

devlin carnate Over a year ago

I think the OP wants to know how to use variable values instead of '123'

DirtyBit Over a year ago

@devlincarnate if that is the case, edited.

Jay Blanchard Over a year ago

Your script is at risk for SQL Injection Attacks.. Please do not demonstrate bad technique in answers. Learn about prepared statements for PDO and MySQLi.

Collectives™ on Stack Overflow

Mysql insert into string value [duplicate]

1 Answer 1

3 Comments

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Linked

Related