FUDforum: comp.lang.php » update mysql without manually tying SET statements

Home » Imported messages » comp.lang.php » update mysql without manually tying SET statements

Show: Today's Messages :: Polls :: Message Navigator

Re: update mysql without manually tying SET statements [message #178176 is a reply to message #178161]

Thu, 17 May 2012 18:06

Alex Pavluck
Messages: 5
Registered: April 2011

Karma:

Junior Member

Shake's suggestion worked exactly how I needed it to work. I had to substring some things off as he said, but all in all, was just what was needed.

Thanks!!!!

On Wednesday, May 16, 2012 10:23:12 AM UTC-4, Shake wrote:
> El 16/05/2012 16:12, apavluck(at)gmail(dot)com escribiï¿½:
>> I am trying to setup some generic code that will allow me to update a mysql database via form and php. I can capture the data in the row of the database that I want to update. I can present that in a form populated with the existing values. What I can't figure out how to do is to avoid typing out the SET statements in the update query.
>> [...]
>> The reason I want to do this is because I manage many projects all with their own variables and databases and the update is the only part that I have to type in manually.
>
> Withouth entering in details, security and best practices...
>
> $sqlString = ' UPDATE blablalba SET ';
> foreach($_POST as $key => $value)
> {
> $sqlString .= " `$key` = '$value', ";
> }
>
> // You have to deal here a little with the last comma ;)
>
> It's possible not all data in $_POST are fields of the database. You
> could manage prefixing the indexes or other ways...
>
> foreach($_POST as $key => $value)
> {
> if(!preg_match('/^my_prefix.+/',$key)) continue;
> $sqlString .= " `$key` = '$value', ";
> }
>
> That's some basic ideas, but be carefull, because there are important
> things to take in care when using this metodologies. Using POST data to
> build SQL strings "automagically" implies taking care of sqlInjection
> and thiese kind of things.
>
> Greetings

Report message to a moderator

[Message index]

		update mysql without manually tying SET statements By: Alex Pavluck on Wed, 16 May 2012 14:12
		Re: update mysql without manually tying SET statements By: Shake on Wed, 16 May 2012 14:23
		Re: update mysql without manually tying SET statements By: Thomas 'PointedEars' on Wed, 16 May 2012 16:06
		Re: update mysql without manually tying SET statements By: Alex Pavluck on Thu, 17 May 2012 18:06
		Re: update mysql without manually tying SET statements By: Shake on Thu, 17 May 2012 19:06
		Re: update mysql without manually tying SET statements By: M. Strobel on Wed, 16 May 2012 20:48
		Re: update mysql without manually tying SET statements By: IRC on Thu, 17 May 2012 11:14
		Re: update mysql without manually tying SET statements By: Erwin Moller on Fri, 18 May 2012 08:49
		Re: update mysql without manually tying SET statements By: bill on Thu, 17 May 2012 11:09

Previous Topic:	table appears with empty rows, and row data appears before table. Code seems ok. What is going on?
Next Topic:	Dynamic water marking (redirect?)

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Mon Jul 01 08:32:45 GMT 2024

Total time taken to generate the page: 0.03988 seconds