Collections:
PHP MSSQL - Including Text Values in SQL Statements
PHP MSSQL - How To Include Text Values in SQL Statements?
✍: Guest
Text values in SQL statements should be quoted with single quotes ('). If the text value contains a single quote ('), it should be protected by replacing it with two single quotes (''). In SQL language syntax, two single quotes represents one single quote in string literals.
The tutorial exercise below shows you two INSERT statements. The first one will fail, because it has an un-protected single quote. The second one will be ok, because a str_replace() is used to replace (') with (''):
<?php $con = mssql_connect('LOCALHOST','sa','FYIcenter'); mssql_select_db('FyiCenterData', $con); $notes = "It's a search engine!"; $sql = "INSERT INTO fyi_links (id, url, notes) VALUES (" . " 201, 'www.google.com', '".$notes."')"; if (!mssql_query($sql, $con)) { print("SQL statement failed with error:\n"); print(" ".mssql_get_last_message()."\n"); } else { print("1 rows inserted.\n"); } $notes = "It's another search engine!"; $notes = str_replace("'", "''", $notes); $sql = "INSERT INTO fyi_links (id, url, notes) VALUES (" . " 202, 'www.yahoo.com', '".$notes."')"; if (!mssql_query($sql, $con)) { print("SQL statement failed with error:\n"); print(" ".mssql_get_last_message()."\n"); } else { print("1 rows inserted.\n"); } mssql_close($con); ?>
If you run this script, you will get something like this:
SQL statement failed with error: Unclosed quotation mark after the character string ')'. 1 rows inserted.
⇒ PHP MSSQL - Including Date and Time Values in SQL Statements
⇐ PHP MSSQL - Deleting Existing Rows in a Table
⇑ SQL Server FAQs - PHP MSSQL Functions - Managing Tables and Data Rows
2024-02-18, 1269🔥, 0💬
Popular Posts:
What Happens to Your Transactions When ERROR 1205 Occurred in MySQL? If your transaction receives th...
What Happens to Your Transactions When ERROR 1205 Occurred in MySQL? If your transaction receives th...
How To Convert Numeric Expression Data Types using the CONVERT() Function in SQL Server Transact-SQL...
How To Use DATEADD() Function in SQL Server Transact-SQL? DATEADD() is a very useful function for ma...
How To Create a Table Index in Oracle? If you have a table with a lots of rows, and you know that on...