How do i update the table that doesn't have primary key?

[PHP Strome the Front]

I need to update my table which don’t have primary key can you say how do i update using this PDO wrapper class
http://www.imavex.com/php-pdo-wrapper-class/

[__]

primary keys are for identifying records, so, without a primary key, it is not possible to identify specific records. If you need to, then you should change your DB design so it uses primary keys.

Otherwise, your updates would apply to any records that match your where clause. In some cases, this might match the specific record you want; in others, it might match several.

If you need a more specific answer, you’ll need to share your DB schema (you can use show create table your_table_name_goes_here;)

[PHP Strome the Front]

Yes it only contains one row not more than that…i want to update that table…Can it be done using that PDO wrapper class?

You know if i use run (in that PDO wrapper class) there is high chance of sql injection, isn’t it?

[__]

it only contains one row not more than that…i want to update that table…Can it be done using that PDO wrapper class?

If you want to update all records in a table, you can simply leave out the where clause. In reading your class, it would appear that you could do (not tested):

$db->update( 'table_name',['field_name'=>'new value'],'true' );

if i use run …there is high chance of sql injection, isn’t it?

Maybe high. Maybe none at all. The risk of injection has to do with the way you provide untrusted (i.e., user-submitted) data, not which functions you use to do it. It’s easier to make a mistake with the run method, but it is possible to do in other methods. For example:

$db->update( 'table_name',['col'=>'value'],"col2={$_POST['user_input']}" );

Here, using user-supplied data directly in the $where argument makes it impossible to safeguard against injection attacks (or, simple errors). If you need to do something like this, you should do:

$sanitized_user_input = $db->quote( $_POST['user_input'] );
$db->update( 'table_name',['col'=>'value'],"col2=$sanitized_user_input" );

There’s no single, all-encompassing solution. You must understand where the risk comes from: what it is that actually causes the problem. Never Trust User Input.

[PHP Strome the Front]

traq you are really great you always help with best solution. Thanks infinite times

[__]

no problem, glad I could help.

[Author]

Posts