Where clause containing dots extension in mysql

Question

I have a question which is to select values from my DB. I have a where clause like this :

$query = 'SELECT * FROM liquid 
          WHERE Id = '.$id.' 
          AND (
                    picone = tiger-1477927129.jpg OR 
                    pictwo = tiger-1477927129.jpg 
                    OR picthree = tiger-1477927129.jpg 
                    ' . 'picfour = tiger-1477927129.jpg 
                    OR picfive = tiger-1477927129.jpg
                    OR picsix = tiger-1477927129.jpg
          )';

The problem is I have dots before the file extension, so sql does not execute this. Do you know how could I solve this?

Thanks Lee

Looks awful. Are you aware that MySQL requires (single) quotes around string constants? — Gordon Linoff, Oct 31 '16 at 21:22
You need to learn basic SQL syntax... And if you think the dots are a problem, imagine what those `-` are causing... — Marc B, Oct 31 '16 at 21:36

score 2 · Accepted Answer · answered Oct 31 '16 at 21:25

2

Use quotes around the values i.e. image='image.jpg' and you will need to escape the quotes for the string in PHP

 $query = 'SELECT * FROM liquid WHERE
    Id = '.$id.'
    AND (
        picone = \'tiger-1477927129.jpg\'
        OR pictwo = \'tiger-1477927129.jpg\'
        OR picthree = \'tiger-1477927129.jpg\'
        OR picfour = \'tiger-1477927129.jpg\'
        OR picfive = \'tiger-1477927129.jpg\'
        OR picsix = \'tiger-1477927129.jpg\'
    )
';

answered Oct 31 '16 at 21:25

Andrew

1,322
14
20

1

Could encapsulate in double quotes then the concatenation and escaping can be removed. – chris85 Oct 31 '16 at 21:35
thank all of you. :) – Chao LI Nov 01 '16 at 21:31

Where clause containing dots extension in mysql

1 Answers1