Do I need to add a quote to my SQL statement?

Question

This is my current statement. It does not work. It returns 0 results.

SELECT ID,ACCOUNT,Key,MasterKey, key FROM Asset 
    WHERE  MasterKey = $parent_key And Asset = $asset

If I change this statement to hardcoded values:

SELECT ID,ACCOUNT,Key,MasterKey, key FROM Asset 
    WHERE  MasterKey = '1234' And Asset = 'Test'

It works.

The variables are being filled using an IBM tool, Castiron. I'm not sure if I need to consult that group, or just simply add the single quotes around the variable values.

Something like this:

SELECT ID,ACCOUNT,Key,MasterKey, key FROM Asset 
    WHERE  MasterKey = '''' + $parent_key + '''' And Asset = '''' + $asset + ''''

Any thoughts?

affaz · Answer 1 · 2017-02-10T18:30:03.313

0

Try this..Use single quotes for the variables

SELECT ID,ACCOUNT,Key,MasterKey, key FROM Asset WHERE MasterKey = '$parent_key' And Asset = '$asset'

edited Feb 10 '17 at 18:30

answered Feb 10 '17 at 15:38

affaz

1,191
9
23

Usually it is a good idea to expound on the code in your answer. Tell about how it works or what exactly you are doing. This helps newer developers understand exactly what is going on. – Caleb Kleveter Feb 10 '17 at 17:52
@CalebKleveter Thanks – affaz Feb 10 '17 at 18:30

score 0 · Answer 2 · answered Feb 10 '17 at 15:39

0

"SELECT ID, ACCOUNT, Key, MasterKey, key FROM Asset WHERE MasterKey = '{$parent_key}' And Asset = '{$asset}'"

That may help.

answered Feb 10 '17 at 15:39

Anton Korotkoff

50
2

Do I need to add a quote to my SQL statement?

2 Answers2