codeigniter $this->db->where(); custom string problem [duplicate]

Question

Im trying to select some values using a custom string. below is my code

  $this->db->from('posted');
  $st="infor='rent' AND (typeq='in' OR typeq='out')";
  $this->db->where($st);  
  $q = $this->db->get();

A Database Error Occurred

Error Number: 1054

Unknown column ‘infor=‘rent’’ in ‘where clause’
SELECT * FROM (`posted_ads`) WHERE `infor=‘rent’` AND (typeq=‘in’
 OR typeq=‘out’)
Filename: C:\wamp\www\parklot\system\database\DB_driver.php
Line Number: 330

i think the problem is coz of

WHERE `infor='rent'`

when i manualy execute this code it works perfectly.

WHERE infor='rent'

how do i get rid of

``

because its automatically added

itzmukeshy7 · Accepted Answer · 2016-12-20 07:54:42Z

23

Add a third parameter to the where() and set it to FALSE

  $this->db->from('posted');
  $st="infor='rent' AND (typeq='in' OR typeq='out')";
  $this->db->where($st, NULL, FALSE);  
  $q = $this->db->get();

$this->db->where() accepts an optional third parameter. If you set it to FALSE, CodeIgniter will not try to protect your field or table names with backticks.

CodeIgniter Documentation

edited Dec 20, 2016 at 7:54

itzmukeshy7

2,6781 gold badge24 silver badges30 bronze badges

answered Sep 25, 2011 at 18:48

Fad

9,8683 gold badges48 silver badges65 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

uzsolt Over a year ago

If you do similar things often, useful to create a function which add ticks around the table names and fields - or write a simple wrapper-function which calls db->where with proper ticks (with false third parameter of course).

Tyguy7 Over a year ago

It's a shame that this isn't in the docs here. ellislab.com/codeigniter/user-guide/database/active_record.html

Fad Over a year ago

@user1253085 It's in there. You must've overlooked.

Tyguy7 Over a year ago

I see it now. At the very, very bottom. I'm used to docs defining function usage and available params and options before showing examples.

Michael · Accepted Answer · 2019-06-11 18:07:12Z

0

While the solution works I wanna add: Be careful! You need to secure your query and escape all values! If you like to use the Query Builder

$q = $this->db->select('*')->from('posted_ads')
    ->where('infor', 'rent')
    ->or_group_start()
            ->where('typeq', 'in')
            ->where('typeq', 'out')
    ->group_end()
->get();

This way Codeigniter takes care of proper escaping.

answered Jun 11, 2019 at 18:07

Michael

3534 silver badges21 bronze badges

1 Comment

mickmackusa Jun 4 at 19:49

Did you test this? What was the rendered SQL?

Collectives™ on Stack Overflow

codeigniter $this->db->where(); custom string problem [duplicate]

2 Answers 2

4 Comments

1 Comment

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

4 Comments

1 Comment

Linked

Related