How can I fix the error syntaxe SQL with DELETE function

Asked Dec 16 '21 at 00:05

Active Dec 16 '21 at 00:24

Viewed 29 times

I initialize my database with PDO and i use this parameter :

PDO::MYSQL_ATTR_INIT_COMMAND => "SET NAMES UTF8",
PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC

I do a sql request to my Database like that :

$sql = $db->query("DELETE FROM :equipement WHERE ID = :id", [
    ':equipement' => $_POST['type'],
    ':id' => (int)$_POST['id']
]);

var_dump($_POST) :

array(3) { ["id"]=> string(1) "4" ["type"]=> string(8) "portable" ["action"]=> string(6) "delete" }

my error :

Fatal error: Uncaught PDOException: SQLSTATE[42000]: Syntax error or access violation: 1064

I think my error syntaxe is :equipement because it is remplacing by 'portable' and ' create trouble...

Did you know, what i'm supposed to do to fix it?

edited Dec 16 '21 at 00:14

asked Dec 16 '21 at 00:05

Catif

What error do you get? How do you initialize `$db` variable? – ozahorulia Dec 16 '21 at 00:09
please, post your problem with specific explanation for you issue – Faesal Dec 16 '21 at 00:11
Sorry, i update my post with more informations – Catif Dec 16 '21 at 00:14
try to run this on you database direct and display the error to us. – Faesal Dec 16 '21 at 00:15
@Faesal , On my database (phpmyadmin) I don't have error, that work – Catif Dec 16 '21 at 00:17
5

You can not bind your table name as a parameter. Check this question for more info: https://stackoverflow.com/questions/182287/can-php-pdo-statements-accept-the-table-or-column-name-as-parameter – ozahorulia Dec 16 '21 at 00:17
Oh, I did not know that… Thanks, everyone, for your answer! – Catif Dec 16 '21 at 00:22

0 Answers0