Combining a variable in MySQL query statement

[loisk]

Hi,

I am getting an DBI error (DBD::mysql) from the following code. Can anybody help and tell me if anything wrong in it? Thanks!

   foreach my $f (@{$field_ref})
    {
        next if $f->{value} eq "";           
        $stmt .= "," if $stmt;               
        $stmt .= $f->{name} . " = " . $dbh->quote ($f->{value});
    }
 
   $stmt = "INSERT INTO myTable SET $stmt";    
    $dbh->do ($stmt);    

[eWish]

Here is an example that works. Instead of inserting the data directly, I am using placeholders which will escape any special characters. SET is used when you do an update.

my $insert_statement = $dbh->prepare('INSERT INTO table_name(column1, column2) VALUES(?,?)');
   $insert_statement->execute($value1, $value2);
   $insert_statement->finish(); 

--Kevin

[loisk]

Thanks, Kevin!

I need to get the field name and value from the form a user enteres.
I am being forced to use a variable to extract those unknown, until user select, column name and the value.

[eWish]

Do have another question? Also, did you try what I showed as an example? Did you get any errors?

--Kevin

[loisk]

Do have another question? Also, did you try what I showed as an example? Did you get any errors?

--Kevin

Hi Kevin,

In case you wonder...
My server was down and I didn't get a chance to get back on it. I will let you know... Thanks!