mysqli and prepared statements

Question

I cannot see to find the problem in this php code:

if ($stmt = $mysqli->prepare("INSERT INTO Champions(Spell 1) VALUES(?)")) { $stmt->bind_param('s', $SP1); $stmt->execute(); $stmt->close(); } else { printf("Errormessage: %s\n", $mysqli->error); } }

Just throws the error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '1) VALUES (?)' at line 1

What is Spell 1 supposed to do in the query? That's a literal and a number, not a string or column name. — mario
– mario, Commented Nov 20, 2014 at 4:50
Try this $mysqli->prepare("INSERT INTO Champions('Spell 1') VALUES(?)") — rdanusha
– rdanusha, Commented Nov 20, 2014 at 4:51
If that's your field name, delimit it with backticks... Poor choice for a field name though... — sgeddes
– sgeddes, Commented Nov 20, 2014 at 4:52
Ya I really should just use an underscore then I guess, Thanks — user3558177
– user3558177, Commented Nov 20, 2014 at 4:53

Rakesh Sharma · Accepted Answer · 2014-11-20 04:50:42Z

CAUSE YOU HAVE SPACE IN FIELD NAME

Spell 1

try with proper fieldname

INSERT INTO Champions(Spell 1) VALUES(?) ^

or use quoting(not tried)

INSERT INTO Champions(`Spell 1`) VALUES(?)

Collectives™ on Stack Overflow

mysqli and prepared statements

1 Answer 1

Comments

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Related