sql query giving error in php

Question

I am trying to run this sql query in php but I am getting an error that my query is wrong. please help

<?php
    @include("dbcon.php");
    $last_date = $_POST['lastdate'];
    $page_rows=3;
    $result = mysql_query("SELECT  * from events where dated < $last_date order by dated desc limit $page_rows") or die(mysql_error());
    //for testing
    echo $result;
?>

try to add apixs to vars in sql '$last_date' order by dated desc limit '$page_rows' — Luca Olivieri, Feb 19 '15 at 14:20
add conversion function and single quotes in your sql: `...dated < to_date('$last_date')...`. — collapsar, Feb 19 '15 at 14:20
Are you sure $_POST['lastdate'] is not empty? Also, post the full error message, it helps us to help you — Purefan, Feb 19 '15 at 14:22
don't forget to sanitize your input to avoid mysql injection: $last_date = mysql_real_escape_string($_POST['lastdate']); — n-dru, Feb 19 '15 at 14:22
*"but I am getting an error"* - oh, being what exactly? Syntax error? *Knew it*. Show us what the error is. — Funk Forty Niner, Feb 19 '15 at 14:27
For the security of your code, see [How can I prevent SQL-injection in PHP?](http://stackoverflow.com/q/60174/2257664). — A.L, Feb 19 '15 at 14:29

score 0 · Accepted Answer · edited Feb 19 '15 at 14:32

0

i think its because of your $last_date ..It should be inside single quotes '' this should work

$result = mysql_query("SELECT  * from events where dated < '$last_date' order by dated desc limit $page_rows")  or die(mysql_error());

edited Feb 19 '15 at 14:32

Utkarsh Dixit

4,267
3
15
38

answered Feb 19 '15 at 14:21

Nithin

5,470
37
44

score 0 · Answer 2 · answered Feb 19 '15 at 14:21

If its only syntax error then try this.

<?php
    @include("dbcon.php");
    $last_date = $_POST['lastdate'];
    $page_rows=3;
    $result = mysql_query("SELECT  * from events where dated < '$last_date' order by dated desc limit '$page_rows'") or die(mysql_error());
    //for testing
    echo $result;
    ?>

score 0 · Answer 3 · answered Feb 19 '15 at 14:25

Just add single quotes. Use the below Code

<?php
@include("dbcon.php");
$last_date = $_POST['lastdate'];
$page_rows=3;
$result = mysql_query("SELECT  * from events where dated < '$last_date' order by dated desc limit $page_rows") or die(mysql_error());
//for testing
echo $result;
?>

Hope this helps you

score 0 · Answer 4 · answered Feb 19 '15 at 14:35

$result = mysql_query(
            sprintf("SELECT  * 
                    FROM events
                    WHERE dated < '%s' 
                    ORDER BY dated DESC 
                    LIMIT %d", addslashes($last_date), intval($page_rows))) 
    or die(mysql_error());

sql query giving error in php

4 Answers4