Codeigniter sql statement error

Question

I am tring to validate that there is a record for a name on a csv file. I am using an sql statement to look to see if that name exist, but i get this error

Error Number: 1054

Unknown column 'aa' in 'where clause'

SELECT name FROM company WHERE name =aa


 public function findCompany($company){
    $query = $this->db->query("SELECT name FROM companyWHERE name =".$company);
    if($query->num_rows() > 0){
        return true;
    }else{
        return false;
    }
}

Could it be an isue with attaching a variable to the end of the string?

score 2 · Accepted Answer · answered Jan 30 '17 at 16:59

2

Try this

function findCompany($company){
    $query = $this->db->query("SELECT name FROM company WHERE name = '$company' ");
    $result = $query->result_array();

    if($result > 0)
    {
        return true;
    }else{
        return false;
    }
}

Error is

SELECT name FROM companyWHERE 
                       ^^^

And check wrapping " always ..

answered Jan 30 '17 at 16:59

Abdulla Nilam

36,589
17
64
85

That seemed to work for the cases I tried. What do the ' ' do differently? – John Doe Jan 30 '17 at 17:01
its to indicate text value – Abdulla Nilam Jan 30 '17 at 17:01
read this http://stackoverflow.com/questions/11321491/when-to-use-single-quotes-double-quotes-and-backticks-in-mysql – Abdulla Nilam Jan 30 '17 at 17:02
`if($result > 0)` how can you compare this..can you explain?? – Hikmat Sijapati Jan 30 '17 at 17:05
@Hekmat that used to find out is there is an array. if its not empty array it will pass true. if false it's and empty array. – Abdulla Nilam Jan 30 '17 at 17:20

Hikmat Sijapati · Answer 2 · 2017-01-30T17:13:53.800

0

Try like this..

 function findCompany($company){
    $this->db->select('name');
    $this->db->where('name',$company);
    $query = $this->db->get('company');

    if($query->num_rows > 0) {
        return true;
    }else{
        return false;
    }
}

edited Jan 30 '17 at 17:13

answered Jan 30 '17 at 17:01

Hikmat Sijapati

6,869
1
9
19

score 0 · Answer 3 · answered Jan 30 '17 at 17:08

Other than missing the quotes, you're also open for SQL injection. Instead of worrying about quotes, let Codeigniter/mysqli take care of it for you by passing it through as an argument.

$query = $this->db->query("SELECT name FROM company WHERE name = ?", array($company));

Codeigniter sql statement error

3 Answers3