Php Mysql query not working when adding AND parameter with >=

Question

I am trying to get my php script to output the name of a row in my mysql database. I know the issue is with the long >= '$Slong'. The long value in the datase is a float. The Slong value is set to 1.11 and there is a row that has the long value at 1.21.

I believe this is where the problem lies:

$Slong = $long - 0.01;
$result = mysql_query("SELECT name FROM locations WHERE age < '$age' AND aTime = 'Morning' AND long >= '$Slong'");

stop using deprecated version `mysql_*`. turn to `mysqli_*` or `PDO` with prepared statements — Alive to die - Anant, Jul 29 '16 at 06:59
@Anant can you point me in the place to find the information on this please? — Max, Jul 29 '16 at 07:01
I am not getting a error @mitkosoft it just isn't outputting anything — Max, Jul 29 '16 at 07:04
`long` is reserved word, so either put backticks around it or change the name of the column — mitkosoft, Jul 29 '16 at 07:06
Ok thank you I'll check it out @Anant. I still would like to learn from my question though. — Max, Jul 29 '16 at 07:06
Nope. http://unix.stackexchange.com/questions/27428/what-does-backquote-backtick-mean-in-commands — mitkosoft, Jul 29 '16 at 07:08
Let us [continue this discussion in chat](http://chat.stackoverflow.com/rooms/118604/discussion-between-max-and-mitkosoft). — Max, Jul 29 '16 at 07:10

score 1 · Accepted Answer · answered Jul 29 '16 at 07:18

1

Long is reserved keyword, so use backticks around:

$Slong = $long - 0.01;
$result = mysql_query("SELECT name FROM locations WHERE age < '$age' AND aTime = 'Morning' AND `long` >= '$Slong'");

answered Jul 29 '16 at 07:18

mitkosoft

5,262
1
13
31

score 0 · Answer 2 · edited May 23 '17 at 11:54

long is keyword in sql. You should use back tick character(`).

For back tick, refer https://superuser.com/questions/254076/how-do-i-type-the-tick-and-backtick-characters-on-windows

Also instead of using direct substitution values, you could use below methods to avoid sql injection.

You basically have two options to achieve this:

Using PDO (for any supported database driver):

$stmt = $pdo->prepare('SELECT * FROM employees WHERE name = :name');

$stmt->execute(array('name' => $name));

foreach ($stmt as $row) {
    // do something with $row
}

Using MySQLi (for MySQL):

$stmt = $dbConnection->prepare('SELECT * FROM employees WHERE name = ?');
$stmt->bind_param('s', $name);

$stmt->execute();

$result = $stmt->get_result();
while ($row = $result->fetch_assoc()) {
    // do something with $row
}

Please refer How can I prevent SQL-injection in PHP?

Php Mysql query not working when adding AND parameter with >=

2 Answers2