Re^3: SQL Insert with blank in the middle

ALWAYS use parameters EVERYWHERE

Yeah, except of course where you can't. Note the OPs problem is having a space in the column name, with the column name stored in a variable. I do not know any engine that allows a placeholder for a column name. (In the OPs case, I wonder if the $_ for the column name is actually correct, but I do want to point out that you cannot use parameter EVERYWHERE. Table names are an other example of where you cannot use parameters.)

Comment on Re^3: SQL Insert with blank in the middle

Replies are listed 'Best First'.
Re^4: SQL Insert with blank in the middle by mje (Curate) on Jul 08, 2010 at 12:09 UTC
and the proper way to quote an identifier e.g., a column name is quote_identifier.	[reply]
Re^4: SQL Insert with blank in the middle by amedico (Sexton) on Jul 11, 2010 at 17:49 UTC
When can't you? It's perfectly possible to dynamically generate parameterized queries, even.	[reply]