Question

I’d like to insert data into a table only when certain values in that table’s (sessionid) row match another variable. I am struggling to put together the INSERT statement. The approach I am taking: retrieve all the rows in the table that match the criteria (retailer=$retailer) and then iterate through those rows inputting the variable options into the sessionid table.

$retailer = $_GET['retailer'];
$options = $_GET['options'];
$session = session_id();

//mysql connection stuff goes here

$query = "
SELECT *
FROM `sessionid`
WHERE `retailer` = '$retailer'
";
$result = mysql_query($query) or die(mysql_error());
while($row = mysql_fetch_assoc($result)) {
      mysql_query("INSERT INTO sessionid (options) VALUES('$options')");
    }

Is the syntax correct for me to do this? Thanks!

Answer 1

Are you maybe looking for the UPDATE command instead?

UPDATE   sessionid
SET      options = $options
WHERE    retailer = $retailer

By the way, I would look in to using PDO as it’s more secure than pushing $_GET values in a database.

$db = new PDO('mysql:host=localhost;dbname=MYDATABASE', 'username', 'password');

$db->prepare('UPDATE sessionid SET options = ? WHERE retailer = ?');

$db->execute(array($options, $retailer));