error in sql syntax

Discussion in 'PHP' started by promotingspace.net, Mar 6, 2008.

0
  1. #1
    Hi
    I cannot find the error in the sql code below. can you help me?
    thanks
    the sql code:
    		$sql = "UPDATE member SET " .
			"name = $processed[fullname], email = $processed[email],accounttype = $processed[accounttype],bankaccount = $processed[bankaccount], email_priv = $email_priv " .
			"WHERE id = $_SESSION[uid]";
    Code (markup):
    the parent code:
    	if ($form->valid() ) {
		$processed = $form->getProcessed();
		$email_priv = isset($processed['email_priv']) ? "'y'" : "'n'";

		$sql = "UPDATE member SET " .
			"name = $processed[fullname], email = $processed[email],accounttype = $processed[accounttype],bankaccount = $processed[bankaccount], email_priv = $email_priv " .
			"WHERE id = $_SESSION[uid]";

		$result = $db->query($sql);
    PHP:

     
    promotingspace.net, Mar 6, 2008 IP
  2. decepti0n

    decepti0n Peon

    Messages:
    519
    Likes Received:
    16
    Best Answers:
    0
    Trophy Points:
    0
    #2 
    $sql = "UPDATE member SET " .
			"name = '" . $processed['fullname'] . "', email = '" . $processed['email'] . "', accounttype = '" . $processed['accounttype'] . "', bankaccount = '" . $processed['bankaccount'] . "', email_priv = '" . $email_priv . "'" .
			"WHERE id = '" . $_SESSION['uid'] . "'";
    PHP:
     
    decepti0n, Mar 6, 2008 IP