user1449737 user1449737 - 10 days ago 6
MySQL Question

Create MySQL table with PHP variable

I'm trying to create a table whose name is the value of what is stored inside the variable

$name
. I have tried numerous different methods but none seem to work for me. Here is the code I am using currently:

mysql_connect("localhost", "peltdyou_admin", "123456") or die(mysql_error());
mysql_select_db("peltdyou_orders") or die(mysql_error());
mysql_query("CREATE TABLE '" .$_POST['name']. "' ( name VARCHAR(30), age INT, car VARCHAR(30))");


I know it is something to do with
'" .$_POST['name']. "'
but I can't work out what.
I have tried
'$name'
in its place which gets it's value from further up in the code.

Any help would be great!

Answer

Use backticks around table name, not quotes. And escape the input! Also, while this works on localhost, make sure that the user running on your production server has the privilege to CREATE tables (usually it's not, AFAIK, on shared hostings of course).

A word of warning: are you really sure you want to create a table on a user input?? how many tables are you going to create in this way? Can't you just redesign the whole thing so that you insert values instead?

$name = mysql_real_escape_string($_POST['name']);
mysql_query("CREATE TABLE `".$name."` ( name VARCHAR(30), age INT, car VARCHAR(30))");