$sql = "update products set smallpicname = $myfile .....????

[Jim S.]

hi, i have this
$sql = "update products set smallpicname = $myfile where id=37";
mysql_query($sql);
i want the value of $myfile to be in the $sql , but it is not doing it, so
what am i doing wrong?
how can i put variables in the $sql statement so i can execute it with
mysql_query ???
since i want also to put .....id= $idvar please help

[Antonino Tumminelli]

$sql = "update products set smallpicname = ".$myfile." where
id=".$idvar;

[Jim S.]

i tried that it did not work.
i know that the value is in the $myfile since i tested it using echo.

"Antonino Tumminelli" <my*****@web.de> wrote in message
news:11**********************@g43g2000cwa.googlegr oups.com...

$sql = "update products set smallpicname = ".$myfile." where
id=".$idvar;

[Jon]

Try $sql = "UPDATE products SET smallpicname = '$myfile' WHERE id=37"; -
you're missing the single quotes for string data (which I assume
smallpicname is).

To do the id=idvar it'd be "UPDATE products SET id=$idvar, smallpicname =
'$myfile' WHERE id=37";

"Jim S." <ji*@yeah.com> wrote in message
news:1h*****************@newsread1.news.atl.earthl ink.net...

hi, i have this
$sql = "update products set smallpicname = $myfile where id=37";
mysql_query($sql);
i want the value of $myfile to be in the $sql , but it is not doing it, so
what am i doing wrong?
how can i put variables in the $sql statement so i can execute it with
mysql_query ???
since i want also to put .....id= $idvar please help

[ces.fci]

Be sure to escape any values that are in your queryt, e.g:
$myfile = mysql_real_escape_string($myfile);
$sql = "update products set smallpicname ='$myfile' where id='$idvar'";

[Jim S.]

smallpicname is the field name in the table, and $myfile is the variable
that holds the value.
i tried your suggestion and it did not work. (sorry, any other ... what am i
doing wrong) i know everything is right since if i change $myfile with
\'hello\' the value get stored where it supposed to.

thanks again guys and gals
jim

"Jon" <jo***@netins.com> wrote in message
news:dr*********@news.netins.net...

Try $sql = "UPDATE products SET smallpicname = '$myfile' WHERE id=37"; -
you're missing the single quotes for string data (which I assume
smallpicname is).

To do the id=idvar it'd be "UPDATE products SET id=$idvar, smallpicname =
'$myfile' WHERE id=37";

"Jim S." <ji*@yeah.com> wrote in message
news:1h*****************@newsread1.news.atl.earthl ink.net...

hi, i have this
$sql = "update products set smallpicname = $myfile where id=37";
mysql_query($sql);
i want the value of $myfile to be in the $sql , but it is not doing it,
so
what am i doing wrong?
how can i put variables in the $sql statement so i can execute it with
mysql_query ???
since i want also to put .....id= $idvar please help

[Stanch]

try this
$sql = "UPDATE products SET smallpicname='".$myfile."'.....";

Should work.

Cheers,
Ivan

Jim S. wrote:

smallpicname is the field name in the table, and $myfile is the variable
that holds the value.
i tried your suggestion and it did not work. (sorry, any other ... what am i
doing wrong) i know everything is right since if i change $myfile with
\'hello\' the value get stored where it supposed to.

thanks again guys and gals
jim

"Jon" <jo***@netins.com> wrote in message
news:dr*********@news.netins.net...

Try $sql = "UPDATE products SET smallpicname = '$myfile' WHERE id=37"; -
you're missing the single quotes for string data (which I assume
smallpicname is).

To do the id=idvar it'd be "UPDATE products SET id=$idvar, smallpicname =
'$myfile' WHERE id=37";

"Jim S." <ji*@yeah.com> wrote in message
news:1h*****************@newsread1.news.atl.earthl ink.net...

hi, i have this
$sql = "update products set smallpicname = $myfile where id=37";
mysql_query($sql);
i want the value of $myfile to be in the $sql , but it is not doing it,
so
what am i doing wrong?
how can i put variables in the $sql statement so i can execute it with
mysql_query ???
since i want also to put .....id= $idvar please help

[Jim Michaels]

"Antonino Tumminelli" <my*****@web.de> wrote in message
news:11**********************@g43g2000cwa.googlegr oups.com...

$sql = "update products set smallpicname = ".$myfile." where
id=".$idvar;
that's not the problem. he should be putting quotes around the string. the
variables will expand just fine.
$sql = "UPDATE products SET smallpicname = '$myfile' WHERE id=$idvar";
it's good practice (just for visual debugging) to put SQL keywords in caps.

[Jim Michaels]

<ce*****@gmail.com> wrote in message
news:11**********************@g43g2000cwa.googlegr oups.com...

Be sure to escape any values that are in your queryt, e.g:
$myfile = mysql_real_escape_string($myfile);
$sql = "update products set smallpicname ='$myfile' where id='$idvar'";
$sql = "update products set smallpicname ='$myfile' where id=$idvar";
it's not good SQL etiquette to put a number in a quotes unless the columns
is defines as some CHAR type.