A Variable In a SQL Statement

Question

1.00/5 (1 vote)

See more:

I'm getting the IP address from this statement and I want to pass the IP onto a SQL statement...Is this correct?

C#

int *addressValue = new int();
char *address = "192.168.1.103";
inet_pton(AF_INET, address, addressValue);
if (ip_header->source_ip != *addressValue)
{
    mysql_query(conn, "SelectCount(*) FROM tblURL WHERE IP = ip_header;source_ip And Status ='Active'");
}

Posted 23-Jul-11 4:30am

Member 7766180

Updated 23-Jul-11 9:06am

Philippe Mori

v2

Add a Solution

Comments

Philippe Mori 23-Jul-11 15:07pm

I have improved the formating a bit.

2 solutions

Solution 2

C#

sprintf(Query,"SELECT COUNT(*) FROM tblURL WHERE IP='%d' AND Status='Active'",(*addressValue));
Resource=mysql_query(conn,Query);

I wonder you dont know how to create a string................................

humm

Posted 23-Jul-11 5:18am

Mohibur Rashid

Comments

Member 7766180 23-Jul-11 19:23pm

humm...from what I'm gathering strings are bad. I'm now storing them as int(11) in the mysql, so now I guess I have to go from a string to an int?
Current info on source_ip
DWORD source_ip; // Source Address (32 bits)
char ipSrc[20], ipDest[20], thisIP[20];
printf("\n Source IP: %s", ipSrc);

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

OriginalGriff · Accepted Answer · 2011-07-23T05:17:00

No. On so many levels...

SelectCount(*)

Needs at least one space - to separate SELECTfrom Count

"SelectCount(*) FROM tblURL WHERE IP = ip_header;source_ip And Status ='Active'"

Is a string. and as such will be passed though to MySql exactly as it is. MySql will then throw an error at you, because it does not recognize source_ip as a command (the ';' will terminate the select statement).

Concatenating text strings to make a Sql Satement is a recipe for disaster at the best of times: use parametrized queries instead.