Prepared statement with ? AS `name`

Asked Aug 02 '17 at 14:45

Active Aug 02 '17 at 14:54

Viewed 36 times

I'd like to use a prepared statement like this:

SELECT DISTINCT
z.`number`,
z.`name`
FROM (
    SELECT 
    ? AS `number`,         <<<<<<<< THIS LINE FAILS
    `name`
    FROM `plu` AS p
    WHERE p.id=?    
) 
AS z

Sadly, it gives an error when preparing: Unknown column 'number' in 'field list'.

If I replace the ? with actual numbers and execute it manually, it works fine.

So, my question, is it even possible to us ? AS name in a prepared statement?

asked Aug 02 '17 at 14:45

Michel

4,076
4
34
52

1

You can't parameterize field names and table names. Generally this is the result of poor table design/schema. – JNevill Aug 02 '17 at 14:47
Try `? AS number` (not backticks) – Álvaro González Aug 02 '17 at 14:50
No luck without the backtics – Michel Aug 02 '17 at 14:51
@ÁlvaroGonzález You can't parameterize field names and table names. – JNevill Aug 02 '17 at 14:51
@JNevill Is he trying to do that? – Álvaro González Aug 02 '17 at 14:52
1

@ÁlvaroGonzález This is a duplicate, for sure, but not because of the lack of backticks. – JNevill Aug 02 '17 at 14:52
My excuses, MySQL does indeed allow to quote aliases with absolutely any kind of quote characters. – Álvaro González Aug 02 '17 at 14:55
You cannot parameterize table names or column names. The reason being that the database cannot compile a query if it does not know in advance the table and column names that are involved in the query – RiggsFolly Aug 02 '17 at 14:55
I am amazed that I cannot find a DUP for this question that I am sure I have seen many times before – RiggsFolly Aug 02 '17 at 14:56
@RiggsFolly I've been looking for an answer for some time, before asking the question here. Couldn't find it either. – Michel Aug 02 '17 at 15:00
How exactly are you running this code? What client or library are you using? What exactly code? I see nothing wrong in it and it run flawlessly in PHP using the PDO library. – Álvaro González Aug 02 '17 at 15:06

Prepared statement with ? AS `name`

0 Answers0