Question

I have a table image_tb, which has 3 fields, id,images,link (id is auto auto_increment), this is my insert code:

mysql_query("
insert into image_tb 
(images,link) 
select 
'".(max(id)+1).".jpeg','".$link."' 
from image_tb
");

it return:

Warning: max(): When only one parameter is given, it must be an array

how to modify? thanks.

Answer 1

do it inside the query,

mysql_query("
insert into image_tb (images,link) 
select CONCAT(COALESCE((SELECT MAX(ID) + 1 FROM image_tb),1), '.jpeg'),'".$link."' 
from image_tb
");

your query is vulnerable with SQL Injection, please read the article below to protect from it

• How can I prevent SQL injection in PHP?