php - I try to query a mysql column which has the name "5". This outputs the wrong column which has the name "22" -


i try query mysql column has name "5". outputs wrong column has name "22".

this php code, $pid variable getting android app , number. when search $pid = 5, instead of getting column "5" artist1, getting column "22" eternal1.

basically confuses column name # in first print screen. if # doesn't exist, searches correctly; if search 16 column 16. how fix this?

$pid = $_get["pid"];  $result=mysql_query("select * tablecomments `$pid` not null ");

http://imgur.com/wfsfetb

http://imgur.com/rza27xc

this design in sql dialects can think of offhand. know several people who, out of habit, add order 0 desc or order 1 ad hoc queries, first pick typically id column , second "name" column or similar. they're querying based on ordinal position of field in query (or schema, in case of *)

in order column named 5, need use appropriate sql quoting mechanism dialect , configuration. example, microsoft sql , access typically use select * tablecomments [5]=5; in postgres , oracle you'd use select * tablecomments "5"=5, , in mysql, quoted identifiers quoted backtick select * tablecomments `5`=5. in microsoft sql can make things more oracle , postgres if session has set quoted_identifier on, in case you'd use quotes instead of square brackets.

as aside, important one, should not take user input , directly embed in sql. if intercept http transmission between android app , php app (trivial proxy charles or fiddler), they'd able replay http request arbitrary sql injected. other commenters have noted, please use parameterized query instead.

since you're trying modify query rather parameters, may need consider whitelisting allowed field names (or compare string you're sent against fields represented in schema).


Comments

Post a Comment

Popular posts from this blog

SPSS keyboard combination alters encoding -

my question not have programming practical issue on spss. accident keyword combination cannot remember because did not intend press changed encoding in spss , text in data in different language english shown small boxes. nevertheless, when kind of analysis performed different language text shown in output. does know reason? tried change encoding did not produce result. first, @ edit > options , see whether setting unicode or locale. might fix it. if have text in multiple languages, want unicode. otherwise, may have specific locale set wrong. can change set locale, need know locale want use.
Read more

Add new record to the table by click on the button in Microsoft Access -

in ms access form want implement separate button, adds new record table. in order added button , attached button event: private sub btnaddrec_click() refresh codecontextobject on error resume next docmd.gotorecord , , acnewrec if err.number <> 0 btnaddrec.enabled = false end if end end sub everything ok when open window , click btnaddrec button, problem when first of perform navigation through existed records , after click on button. got runtime error: 2105: «you can't go specified record. may @ end of recordset» . how solve issue, need have ability add new record on click on specific button, no matter, have walked or not walked through records before. thanks. i created simple form field call description (and autonumber) , created button code follows click event. filled number of records , navigated through them, clicked addnewrec button. form navigated new record without issues. able click addnewrec button directly after ...
Read more

CSS3 Transition to highlight new elements created in JQuery -

i want use css3 color transition apply highlight-fading color effect (yellow transparent) new elements appended markup using jquery. css #content div { background-color:transparent; -moz-transition:background-color 2s; -webkit-transition:background-color 2s; -o-transition:background-color 2s; transition:background-color 2s; } #content div.new { background-color:yellow; } html <div id="content"></div> <a id="add-element" href="#">add new element</a> js $('#add-element').click(function() { var newelement = $('<div class="new">new element</div>'); $('#content').append(newelement); newelement.removeclass('new'); }); when click link, new element created. class "new" (background color yellow) , it's appended html markup. should able remove "new" class trigger background color transition transparent (or whate...
Read more