session error-value fail to insert into DB

Question

i have a php code that insert session value into database,but i get this error when trying to insert Error: INSERT INTO tbale name (amount,bankname) VALUES ( 20000.00,gtbank) Unknown column 'gtbank' in 'field list'.the session has the value GTBANK below is my code that insert session value to database

    <?php

    session_start(); {



    //Include database connection details
    include('../../dbconnect.php');

    if($_SESSION["bn"]) {

}

$amount =  strip_tags($_POST['cat']);
$field1amount = $_POST['cat'];
$field2amount = $field1amount + ($field1amount*0.5);


$sql = "INSERT INTO provide_help (amount,bankname) VALUES ( $field1amount,".$_SESSION['bn'].")";
if (mysqli_query($conn, $sql)) 


$sql = "INSERT INTO gh (ph_id, amount) VALUES (LAST_INSERT_ID(), $field2amount)";
if (mysqli_query($conn, $sql)) 

 {
    $_SESSION['ph'] ="<center><div class='alert alert-success' role='alert'>Request Accepted.</div></center>";
   header("location: PH.php");
} else {
    echo "Error: " . $sql . "<br>" . mysqli_error($conn);
}

mysqli_close($conn);
}
?>

anyone who can help please?.thanks

double quotes doing problem for you. better store session values in some variable. — WeAreRight
– WeAreRight, Commented Feb 10, 2017 at 5:59

Naincy · Accepted Answer · 2017-02-10 05:59:06Z

2

bankname field is type of varchar I think. So you need to pass string with quotes ''. See below your code should be like this.

$sql = "INSERT INTO provide_help (amount,bankname)
     VALUES ( $field1amount,'".$_SESSION['bn']."')";

answered Feb 10, 2017 at 5:59

Naincy

2,9431 gold badge15 silver badges21 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Manwal · Accepted Answer · 2017-02-10 06:12:41Z

2

When inserting string (bankName) in data base it should be covered with quote.

Use this:

$sql = "INSERT INTO provide_help (amount,bankname) VALUES ( $field1amount,'".$_SESSION['bn']."')";
                                                                       // ^                   ^ --- Single quote added

I will suggest you to use bind_params like following:

$stmt = $conn->prepare("INSERT INTO provide_help (amount,bankname) VALUES (?, ?)");
$stmt->bind_param("ds", $field1amount, $_SESSION['bn']);
if ($stmt->execute()){
    // handle success
} else {
    // handle error
}

The argument may be one of four types while binding:

i - integer
d - double
s - string
b - BLOB

edited Feb 10, 2017 at 6:12

answered Feb 10, 2017 at 5:57

Manwal

23.9k15 gold badges65 silver badges95 bronze badges

Collectives™ on Stack Overflow

session error-value fail to insert into DB

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related