C#•3y ago

❔ SQL syntax error - INSERT INTO statement

query looks like this

string query = $"INSERT INTO users " +
                $"(fname, username, email, password, age, gender, state) " +
                $"VALUES ({fname}, {username}, {email}, {password}, {age}, {gender}, {state})";

string query = $"INSERT INTO users " +
                $"(fname, username, email, password, age, gender, state) " +
                $"VALUES ({fname}, {username}, {email}, {password}, {age}, {gender}, {state})";

get a syntax error

please keep in mind this is something for school, stuff like SQL Injections and other new features are dismissible
thanks in advance, benAmi

המשוררOP•4/21/23, 4:43 PM

!eval

MODiX•4/21/23, 4:43 PM

That command had an error

BadArgCount: The input text has too few parameters.

Remove your reaction to delete this message

MODiX•4/21/23, 4:43 PM

benAmi#6360

REPL Result: Failure

string query = $"INSERT INTO users " +
                $"(fname, username, email, password, age, gender, state) " +
                $"VALUES ({fname}, {username}, {email}, {password}, {age}, {gender}, {state})";

string query = $"INSERT INTO users " +
                $"(fname, username, email, password, age, gender, state) " +
                $"VALUES ({fname}, {username}, {email}, {password}, {age}, {gender}, {state})";

Exception: CompilationErrorException

- The name 'fname' does not exist in the current context
- The name 'username' does not exist in the current context
- The name 'email' does not exist in the current context
- The name 'password' does not exist in the current context
- The name 'age' does not exist in the current context
- The name 'gender' does not exist in the current context
- The name 'state' does not exist in the current context

- The name 'fname' does not exist in the current context
- The name 'username' does not exist in the current context
- The name 'email' does not exist in the current context
- The name 'password' does not exist in the current context
- The name 'age' does not exist in the current context
- The name 'gender' does not exist in the current context
- The name 'state' does not exist in the current context

Compile: 522.125ms | Execution: 0.000ms | React with ❌ to remove this embed.

המשוררOP•4/21/23, 4:44 PM

string fname = "Moshe";
string username = "Moshe";
string email = "Moshe@gmail.com";
string age = "124";
string gender = "Moshe";
string password = "Moshe";
int state = 1;
string query = $"INSERT INTO users " +
                $"(fname, username, email, password, age, gender, state) " +
                $"VALUES ({fname}, {username}, {email}, {password}, {age}, {gender}, {state})";
Console.WriteLine(query);

string fname = "Moshe";
string username = "Moshe";
string email = "Moshe@gmail.com";
string age = "124";
string gender = "Moshe";
string password = "Moshe";
int state = 1;
string query = $"INSERT INTO users " +
                $"(fname, username, email, password, age, gender, state) " +
                $"VALUES ({fname}, {username}, {email}, {password}, {age}, {gender}, {state})";
Console.WriteLine(query);

ההמשורר ```cs string fname = "Moshe"; string username = "Moshe"; string email = "Moshe@g...

המשוררOP•4/21/23, 4:44 PM

!eval

MODiX•4/21/23, 4:45 PM

That command had an error

BadArgCount: The input text has too few parameters.

Remove your reaction to delete this message

MODiX•4/21/23, 4:45 PM

benAmi#6360

REPL Result: Failure

string fname = "Moshe";
string username = "Moshe";
string email = "Moshe@gmail.com";
string age = "124";
string gender = "Moshe";
int state = 1;
string query = $"INSERT INTO users " +
                $"(fname, username, email, password, age, gender, state) " +
                $"VALUES ({fname}, {username}, {email}, {password}, {age}, {gender}, {state})";
Console.WriteLine(query);

string fname = "Moshe";
string username = "Moshe";
string email = "Moshe@gmail.com";
string age = "124";
string gender = "Moshe";
int state = 1;
string query = $"INSERT INTO users " +
                $"(fname, username, email, password, age, gender, state) " +
                $"VALUES ({fname}, {username}, {email}, {password}, {age}, {gender}, {state})";
Console.WriteLine(query);

Exception: CompilationErrorException

- The name 'password' does not exist in the current context

- The name 'password' does not exist in the current context

Compile: 672.142ms | Execution: 0.000ms | React with ❌ to remove this embed.

MODiX•4/21/23, 4:45 PM

benAmi#6360

REPL Result: Failure

string fname = "Moshe";
string username = "Moshe";
string email = "Moshe@gmail.com";
string age = "124";
string gender = "Moshe";
string password = "Moshe"
int state = 1;
string query = $"INSERT INTO users " +
                $"(fname, username, email, password, age, gender, state) " +
                $"VALUES ({fname}, {username}, {email}, {password}, {age}, {gender}, {state})";
Console.WriteLine(query);

string fname = "Moshe";
string username = "Moshe";
string email = "Moshe@gmail.com";
string age = "124";
string gender = "Moshe";
string password = "Moshe"
int state = 1;
string query = $"INSERT INTO users " +
                $"(fname, username, email, password, age, gender, state) " +
                $"VALUES ({fname}, {username}, {email}, {password}, {age}, {gender}, {state})";
Console.WriteLine(query);

Exception: CompilationErrorException

- ; expected

- ; expected

Compile: 712.386ms | Execution: 0.000ms | React with ❌ to remove this embed.

MODiX•4/21/23, 4:46 PM

benAmi#6360

REPL Result: Success

string fname = "Moshe";
string username = "Moshe";
string email = "Moshe@gmail.com";
string age = "124";
string gender = "Moshe";
string password = "Moshe";
int state = 1;
string query = $"INSERT INTO users " +
                $"(fname, username, email, password, age, gender, state) " +
                $"VALUES ({fname}, {username}, {email}, {password}, {age}, {gender}, {state})";
Console.WriteLine(query);

string fname = "Moshe";
string username = "Moshe";
string email = "Moshe@gmail.com";
string age = "124";
string gender = "Moshe";
string password = "Moshe";
int state = 1;
string query = $"INSERT INTO users " +
                $"(fname, username, email, password, age, gender, state) " +
                $"VALUES ({fname}, {username}, {email}, {password}, {age}, {gender}, {state})";
Console.WriteLine(query);

Console Output

INSERT INTO users (fname, username, email, password, age, gender, state) VALUES (Moshe, Moshe, Moshe@gmail.com, Moshe, 124, Moshe, 1)

INSERT INTO users (fname, username, email, password, age, gender, state) VALUES (Moshe, Moshe, Moshe@gmail.com, Moshe, 124, Moshe, 1)

Compile: 607.958ms | Execution: 83.025ms | React with ❌ to remove this embed.

המשוררOP•4/21/23, 4:58 PM

Any help please?

Angius•4/21/23, 9:09 PM

Strings in SQL need to be quoted

Angius•4/21/23, 9:09 PM

So it has to be

'Moshe'

'Moshe'

not

Moshe

Moshe

Angius•4/21/23, 9:09 PM

And so on

Angius•4/21/23, 9:09 PM

Prepared statements will take care of that for you

Ⰽ

Ⰽⰰⱈⰻⰽⱄ•4/22/23, 12:32 AM

Not only quoted, but also escaped to prevent SQL injection, bezt way to do that is by using Prepared statement as was mentioned before

Accord•4/23/23, 12:51 AM

Was this issue resolved? If so, run

/close

/close

otherwise I will mark this as stale and this post will be archived until there is new activity.