Question

What is wrong with my code to update sql database the table is Informatie and i need to update the field Text.

$info =  nl2br($_POST["info"]);
    echo $info."<br>";
    $infoid = $_POST["infoid"];
    echo $infoid;
    echo "<br>Info ID : $infoid";
    $sql = "UPDATE Informatie set Text = $text WHERE InfoId = $infoid";
    $query = mysql_query("$sql");

the echo $info and $infoid are correct.

i tryd

$sql = "UPDATE Informatie set Text = $text WHERE InfoId = '$infoid'"; 

also but it didnt work to

Answer 1

string values must be quoted.

$sql = "UPDATE Informatie SET Text = '$text' WHERE InfoId = $infoid";

if InfoID is also a string, then you also need to wrap it with single quotes.

$sql = "UPDATE Informatie SET Text = '$text' WHERE InfoId = '$infoid'";

As a sidenote, the query is vulnerable with SQL Injection if the value(s) of the variables came from the outside. Please take a look at the article below to learn how to prevent from it. By using PreparedStatements you can get rid of using single quotes around values.

• How to prevent SQL injection in PHP?