(OOPPHP)uncaught error: call to a member function query() on string in C:\xampp\htdocs\proxy vragenmodule\functions\update.php:52

Question

1.00/5 (1 vote)

See more:

Im making an update page. To me it looks strange, because the query function in php is in-built and in my case it should work properly. But it doesn't.

My code

<pre>class update
{
    function GetQuestion($question)
    {
        // Question
        $sql12query =$question->query("SELECT DISTINCT question FROM questions WHERE uniq_name='" . $question . "'");
        while ($row12 = $sql12query->fetch_array()) {
            $question = $row12[0];
        }
    }
}

What I have tried:

I tried to make the function public

Posted 3-Nov-22 0:42am

shady morsi

Updated 3-Nov-22 3:25am

Add a Solution

Comments

Richard Deeming 3-Nov-22 9:26am

Your code is vulnerable to SQL Injection[^]. NEVER use string concatenation/interpolation to build a SQL query. ALWAYS use a parameterized query.

PHP: SQL Injection - Manual[^]

1 solution

Add a Solution

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Richard MacCutchan · Accepted Answer · 2022-11-03T03:25:00

Look at your code. You are using the variable $question in three different places for three different purposes ...

PHP

$sql12query =$question->query("SELECT DISTINCT question FROM questions WHERE uniq_name='" . $question . "'");
while ($row12 = $sql12query->fetch_array()) {
    $question = $row12[0];

... which will lead to all sorts of problems.

(OOPPHP)uncaught error: call to a member function query() on string in C:\xampp\htdocs\proxy vragenmodule\functions\update.php:52

1 solution

Solution 1

Add your solution here

Preview 0

(OOPPHP)uncaught error: call to a member function query() on string in C:\xampp\htdocs\proxy vragenmodule\functions\update.php:52

1 solution

Solution 1

Add your solution here

Preview 0

Existing Members

...or Join us