Unknown column error on Mysql insert query

Question

When doing a simple insert into an MYSQL database, I get this error

"Unknown column 'Af452OtQa' in 'field list'"

'Af452OtQa' is the value that I'm attempting to insert into the column 'serialnum' All the variables are set from POST values from the previous page, and all are urlencoded except for this field, which I create the value for and thus, know that it won't have anything but alphanumerics in it.

      $insertSQL = sprintf("INSERT INTO Presentations ('serialnum', 'docurl', 'tracker', 'recipient', 'last_accessed') VALUES (%s, %s, %s, %s, %s,)",
  $sn,$doc,$trackr,$recip,$lastacc);

you forgot the quotes, he consider your value to be a column — Charles Forest
– Charles Forest, Commented Feb 20, 2012 at 20:59

srini.venigalla · Accepted Answer · 2012-02-20 21:00:32Z

2

Isn't there an extra comma in your SQL statement?

You need quotes in the values clause, not the column names portion of the insert

$insertSQL = sprintf("INSERT INTO Presentations "+
                               "(serialnum, docurl, tracker, recipient, last_accessed) "+
                               "VALUES ('%s', '%s', '%s', '%s', '%s')",
                                $sn,$doc,$trackr,$recip,$lastacc);

Also: Have you thought about using the bind variables, because your code is vulnerable to SQL Injection attacks.

answered Feb 20, 2012 at 21:00

srini.venigalla

5,1551 gold badge21 silver badges29 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

I_miss_Steve_already Over a year ago

I'm not sure how to do that. I thought that's what using the %s variables did.

Collectives™ on Stack Overflow

Unknown column error on Mysql insert query

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related